Handling a whistleblowing report

A whistleblowing report needs two connected responses: assessment of the reported wrongdoing and protection against improper treatment of the person raising it. Rejecting the allegation does not automatically answer whether later treatment of the reporter is lawful.

Acknowledge and classify the report

Identify the information disclosed, relevant activity and any immediate risk to people, funds or records. Check whether the report may satisfy whistleblowing conditions even if it was submitted through a grievance channel. Acas explains the applicable protection and employer handling considerations. ^[1]

Choose a recipient and investigator without a material conflict. Preserve relevant evidence and decide whether a regulator, safeguarding body or other authority needs to be involved, taking advice on the appropriate disclosure.

Keep the reporter informed within proper limits

Explain the process, contact point and what feedback can be given without compromising others' rights or the investigation. Do not promise absolute anonymity where it cannot be maintained. Record threats, exclusion or changes to duties after the report and assess whether they require intervention.

Disclosure preparation explains the worker's evidence; investigation design supports impartial fact finding. Keep a separate record of the rationale for any later employment decision concerning the reporter so it can be assessed on its actual grounds.

Separate receipt of the information from a conclusion about protection Record what was disclosed, the recipient, date and supporting material. A report may arrive as a grievance, an informal conversation or a message to a manager who is not the designated whistleblowing contact. Preserve its substance and clarify unclear facts. Do not reject it because the employee did not cite the correct legislation or use the expected form. Acas explains the conditions for whistleblowing protection, but an initial uncertainty about those conditions does not remove the need to consider the reported wrongdoing and any immediate operational risk. [1]

Identify the activity affected and whether urgent preservation or protective action is needed. The concern may relate to safety, records, financial handling or another issue requiring a specialist response. Assign someone able to assess the facts without a material conflict. If senior management is implicated, determine an appropriate independent route rather than sending the report back to the person whose conduct is questioned. Keep the decision about investigation authority on the record, including who can approve resources or external advice needed to examine the concern properly.

Design enquiries around the disclosed facts Write questions that test the information rather than seek to discredit the person reporting it. Identify relevant systems, documents and witnesses, including evidence that may support an innocent explanation. Keep the original disclosure separate from later clarification so the reporting history remains accurate. If a regulator or another authority may need notification, obtain advice on the relevant duty and recipient. Internal investigation should not be used as an assumed reason to postpone a time-sensitive external obligation, nor should information be sent widely without considering the appropriate legal route.

Handle confidential and privileged material with appropriate controls. Limit access to those who need it and keep the basis for searches proportionate. Where the report includes information about other workers or customers, assess how it can be investigated without unnecessary circulation. Do not promise absolute anonymity if the facts may reveal the source or a fair process requires disclosure. Explain the practical limits and discuss specific concerns with the reporter. An honest account of the process is more useful than a reassurance the organisation cannot maintain once enquiries begin.

Maintain a usable communication channel Acknowledge the report, identify a contact and explain the next step and expected update. Ask focused questions where the information is incomplete. If the reporter remains anonymous, consider what can still be investigated and whether a secure follow-up route is available. Keep feedback proportionate to confidentiality and the investigation. The employer may not be able to disclose disciplinary or regulatory details, but can explain that the concern has been considered and what information can appropriately be shared about the process and any relevant practical changes.

Treat requests for updates separately from any employment performance issue. Frustration about a slow response should not automatically be recorded as disloyalty or lack of cooperation. If the report is not substantiated, explain the conclusion within appropriate limits and retain the reasoning. A mistaken concern is not automatically a knowingly false disclosure, and the protection analysis may depend on reasonable belief and other conditions. Obtain advice before taking action against the reporter based on the report itself, particularly where the investigation has simply failed to establish the underlying allegation.

Review later decisions affecting the reporter Monitor credible concerns about exclusion, threats, reduced hours or lost opportunities after the disclosure. Identify who knew about it and the stated reason for the later decision. Keep legitimate management decisions supported by their actual evidence and appropriate independent review where there is a risk of conflict. Do not create a retrospective justification after a complaint of retaliation arrives. The wrongdoing enquiry and the employee-treatment enquiry may require different conclusions; closing the first does not establish that every subsequent workplace action was unrelated to the report.

Ensure policies reflect relevant changes, including the April 2026 addition concerning sexual harassment disclosures, while assessing the remaining protection conditions. ^[2] Train recipients and managers on recognition, escalation and protection from improper treatment. Record remedial actions arising from a substantiated report and check completion. If dismissal or another serious dispute follows, seek prompt specialist advice about the facts and possible urgent remedies. A complete employer record should show the information received, enquiries made, feedback given and safeguards applied, rather than only a final label that the complaint was or was not whistleblowing.