Whistlelink webinars – a practical guide to whistleblowing Register now
Whistlelink webinars – a practical guide to whistleblowing Register now
UK whistleblowing protection changed on 6 April 2026. Sexual harassment is now expressly included as a qualifying disclosure under UK whistleblowing law, making it important for employers to review their policies, internal reporting channels and case handling processes.
Whistlelink helps organisations provide secure, confidential reporting channels with structured case management, anonymous follow-up and clear documentation — supporting a trusted speak-up process for employees and stakeholders.
UK whistleblowing law protects workers who raise certain concerns about wrongdoing in the public interest. The main UK framework is based on the Public Interest Disclosure Act 1998, commonly known as PIDA, together with relevant provisions in employment law.
Unlike EU member states, the UK is not subject to the EU Whistleblowing Directive. This means UK employers are not following the same legal framework as organisations in the EU. However, they still need reliable internal processes for receiving, assessing and documenting whistleblowing reports.
For employers, this means more than simply having a policy in place. A trusted whistleblowing process should make it clear what can be reported, who can report, how reports are handled, and how workers are protected from retaliation.
UK and EU operations?
If your organisation operates across both the UK and the EU, your whistleblowing setup should reflect both frameworks. Whistlelink helps organisations manage internal reporting channels, case handling and follow-up across multiple jurisdictions.
PIDA, the Public Interest Disclosure Act 1998, is the key UK legislation protecting workers who make certain disclosures of information in the public interest. A protected disclosure is a qualifying disclosure made by a worker in accordance with the legal requirements.
For employers, this means whistleblowing reports should be handled through a clear and consistent process. Concerns may relate to legal obligations, health and safety, financial misconduct, environmental damage, safeguarding, governance or the concealment of wrongdoing.
Why this matters for employers?
A report may start as a simple concern, but it can quickly become a protected disclosure if it relates to wrongdoing in the public interest. Secure reporting channels, structured case management and clear documentation help employers respond appropriately from the start.
See how Whistlelink supports secure internal reporting and case management.
UK whistleblowing protection applies to a broad range of workers, not only permanent employees. This can include employees, agency workers, trainees and others who raise concerns in a work-related context.
For employers, this means internal reporting processes should be accessible, easy to understand and clearly communicated across the organisation. Workers need to know where to report concerns, what information to include, and what will happen after a report has been submitted.
A clear whistleblowing process also helps managers, HR, legal and compliance teams respond consistently, protect confidentiality and reduce the risk of retaliation.
Make reporting accessible.
A whistleblowing process is only effective if people know it exists and feel safe using it. Clear reporting channels, simple instructions and confidential follow-up help build trust from the start.
To qualify for whistleblowing protection, a disclosure must usually relate to certain types of wrongdoing and be made in the public interest. These are often referred to as qualifying disclosures.
Qualifying disclosures may include concerns about criminal offences, failure to comply with a legal obligation, miscarriages of justice, dangers to health and safety, damage to the environment, or attempts to conceal information about these types of wrongdoing.
From an employer’s perspective, reports may come from many different parts of the organisation. A concern could involve financial misconduct, health and safety risks, safeguarding issues, environmental harm, harassment, discrimination, corruption or governance failures.
This is why internal reporting channels should be structured enough to capture the right information, while remaining simple enough for workers to use with confidence.
Examples of concerns that may be reported include:
A secure whistleblowing system helps organisations collect reports consistently, protect the identity of reporters where appropriate, assign cases to the right people and document each step of the process.
Since 6 April 2026, sexual harassment has been expressly included as a qualifying disclosure under UK whistleblowing law. This means that workers who make a sexual harassment disclosure can be protected from detriment and unfair dismissal, provided the legal conditions are met.
Previously, workers often had to argue that a sexual harassment disclosure fell under another category of wrongdoing, such as a danger to health and safety. The new change makes the position clearer by explicitly recognising sexual harassment as a matter that can fall within whistleblowing protection.
For UK employers, this makes it important to review how sexual harassment concerns are received, escalated, investigated and documented. A trusted internal reporting channel can help workers raise concerns safely, while giving HR, legal and compliance teams a structured way to manage sensitive cases.
UK employers should consider whether their whistleblowing process clearly covers:
Why this matters.
Sexual harassment reports can involve both workplace conduct and legal risk. A secure whistleblowing system helps employers manage sensitive disclosures consistently, protect confidentiality and create a clear audit trail from the first report to final outcome.
UK whistleblowing law does not only affect how organisations respond after a report has been made. It also affects whether workers feel safe enough to raise concerns internally in the first place.
If employees, contractors or other workers do not trust the internal process, they may be more likely to report concerns externally, including to regulators, prescribed persons or other authorities. This can increase legal, reputational and operational risk for the organisation.
A clear internal whistleblowing process gives people a safe route to raise concerns early. It also gives employers a structured way to assess the report, involve the right people, protect confidentiality and document how the case has been handled.
Internal reporting should be easy to use and trusted.
A reporting channel should make it clear what can be reported, whether reports can be anonymous, who receives the report, how follow-up works and how the organisation protects people from retaliation.
Now that the 2026 changes are in force, UK employers should review their whistleblowing policy, internal reporting channels and case management process.
A strong whistleblowing setup should help workers understand where to report concerns, while giving HR, legal and compliance teams the tools they need to handle sensitive disclosures consistently.
UK employers should consider whether they have:
Whistlelink helps organisations provide secure and confidential internal reporting channels that are simple for workers to use and easy for responsible teams to manage.
For UK employers, this means having a structured way to receive reports, protect confidentiality, assign cases, communicate with reporters and document each step of the process. This is especially important when handling sensitive disclosures involving harassment, misconduct, health and safety, fraud, safeguarding or governance concerns.
Whistlelink is also designed for organisations operating across multiple jurisdictions. If your business has both UK and EU operations, the system can support consistent internal reporting and case management while allowing your organisation to adapt its process to different legal environments.
No. The UK is not subject to the EU Whistleblowing Directive. UK whistleblowing protection is based on the UK legal framework, including PIDA and rules on protected disclosures. Organisations operating in both the UK and the EU should make sure their whistleblowing process reflects both frameworks.
PIDA stands for the Public Interest Disclosure Act 1998. It is the key UK legislation that protects workers who make certain disclosures of information in the public interest.
A protected disclosure is a qualifying disclosure made by a worker in accordance with the legal requirements. In practice, this means the concern must relate to certain types of wrongdoing and be raised in a way that qualifies for legal protection.
From 6 April 2026, sexual harassment will be expressly included as a qualifying disclosure under UK whistleblowing law. This makes it clearer that workers who report sexual harassment can receive whistleblowing protection, provided the legal conditions are met.
Anonymous reporting can help workers feel safer when raising sensitive concerns. For employers, anonymous two-way communication can be valuable because it allows follow-up questions while protecting the reporter’s identity.
Yes. Whistlelink supports UK organisations with secure internal reporting channels, anonymous follow-up, structured case management and clear documentation. It is also suitable for organisations operating across both the UK and the EU.
Ready to strengthen your UK reporting process?
Whether you are reviewing your whistleblowing policy or managing reporting across both the UK and EU, Whistlelink helps you create a secure and trusted internal reporting process.
Annelie Demred
annelie.demred@whistlelink.com
30-minute demo — no commitment.
Nice to meet you!
Questions about which plan is right for your organisation, or how to get the most out of Whistlelink?
→ Or go to our page with Frequently Asked Questions
Do you need quick answers about the product or are you experiencing any issues? We’re here to help.
For confidentiality and data protection reasons, do not share personal data or details relating to specific whistleblowing cases. Submissions containing such information will be deleted.
Nice to meet you!
Please use your work email address.
Bookings from free email providers (Gmail/Yahoo/etc.) are not accepted.
You can unsubscribe at any time. Learn more about how we process your data in our Privacy Policy.
Nice to meet you!
Piacere di conoscervi
Z PRZYJEMNOŚCIĄ SPOTKAMY SIĘ Z TOBĄ
NE BUCURĂM DE CUNOȘTINȚĂ
ENCATADOS DE CONOCERTE
Ravi de vous rencontrer
S RADOSTÍ SE S VÁMI SETKÁME
Whistlelink values your privacy. We will only contact you about our solutions.
HAPPY TO MEET YOU!
Whistlelink values your privacy. We will only contact you about our solutions.
You may unsubscribe at any time. For more info, please review our Privacy Policy
