Whistleblowing: making a protected disclosure

Raising the alarm about serious wrongdoing at work is one of the most difficult and important things an employee can do. In the UK, this is legally protected by the Public Interest Disclosure Act 1998 (PIDA), meaning you cannot be lawfully dismissed or penalised for making a "protected disclosure."

However, employers often see a whistleblowing disclosure as a major threat and may use specific tactics to silence you or undermine your concerns. This guide explains your rights and gives you the strategic insight to navigate the process safely.

1. What is whistleblowing? (And what it is not)

A whistleblowing disclosure is fundamentally different from a personal grievance.

To be legally protected, your disclosure must be about one of the following six categories of wrongdoing — something you reasonably believe has occurred, is occurring, or is likely to occur:

• Criminal offences (e.g., fraud, financial malpractice).
• Breaches of any legal obligation (e.g., your employer is breaking its own contract with a client or breaching statutory duties).
• Miscarriages of justice.
• Danger to someone's health and safety.
• Damage to the environment.
• A deliberate cover-up of any of the above.

2. Key principles for a protected disclosure

To qualify for legal protection under PIDA, your disclosure must meet three key tests:

• Public interest: you must reasonably believe your disclosure is in the public interest. This means it affects more than just you. A 2013 change to the law removed the "good faith" requirement, but the public interest test remains.
• Reasonable belief: you don't need to be right, but you must have a reasonable belief that the information you are disclosing is substantially true.
• Correct recipient: you must make the disclosure to the right person — usually your employer, a legal adviser, or a designated "prescribed person" (a regulator).

Who are "prescribed persons"?

These are official regulators and bodies approved by the UK Government to receive whistleblowing disclosures for specific sectors. Disclosing to them provides automatic protection under PIDA. See the official government list of prescribed people and bodies.

Key examples for public and higher education sectors:

• Information Commissioner's Office (ICO): for data protection breaches and GDPR non-compliance.
• Equality and Human Rights Commission (EHRC): for breaches of equality law and the Public Sector Equality Duty.
• Health and Safety Executive (HSE): for workplace safety and welfare concerns.
• Parliamentary and Health Service Ombudsman (PHSO): for maladministration in public services (must be via an MP referral).

3. Employer tactics: the traps to watch for

An organisation facing a serious whistleblowing disclosure will often move to protect itself, not to investigate the concern. Be prepared for these common detours.

4. How to make a protected disclosure safely

• Document the issue: keep a detailed, dated log of all facts, incidents, and evidence. Store this on a personal device, not your employer's systems.
• Choose your route: decide whether to report internally first or go directly to a prescribed person. If you believe evidence will be destroyed or you will be victimised, a direct external disclosure is often safer.
• Frame your communication: this is critical. State clearly and upfront that you are making a disclosure under the Public Interest Disclosure Act 1998. This puts the recipient on formal notice. Example subject line: "Confidential: Protected Disclosure under PIDA 1998."
• Submit in writing: a written disclosure creates an undeniable paper trail. Clearly outline the wrongdoing you believe has occurred, referencing specific facts and evidence where possible. A vague allegation is not enough.
• Request confirmation: always ask for a reference number or a written acknowledgment of your disclosure.

5. Your legal protections

You are legally protected from detriment because you made a protected disclosure. This protection applies from the moment you make the disclosure. A detriment is any disadvantage, such as:

• Being dismissed — this is an automatic unfair dismissal, and you do not need two years of service to bring a claim.
• Being overlooked for promotion or training.
• Being ostracised by management.
• Being disciplined or given a poor performance review because of your disclosure.

If you suffer a detriment, you can bring a claim to an Employment Tribunal. However, note that PIDA does not protect you from a poor investigation by the regulator — choose the correct recipient and be prepared to follow up.