Question 1

Do I have to report internally first?

Accepted Answer

No - the tiers are options, not a compulsory ladder. Internal channels, prescribed persons (sector regulators designated to receive disclosures), and the Protected Disclosures Commissioner are all protected routes, and reporting to a prescribed person or the Commissioner does not require having tried internally first (the belief standard differs slightly by route - part of the channel advice). Internal-first is often tactically sensible where the employer is functional; it is not a legal precondition, and for some situations - senior wrongdoers, captured processes - it is exactly wrong.

Question 2

What must my employer’s internal channel actually do?

Accepted Answer

Employers with 50 or more employees must maintain formal reporting channels (the obligation reached the 50-249 band from December 2023, and failing to establish channels is itself an offence). The channel must protect your identity, acknowledge your report within 7 days, diligently follow up, and give you feedback within 3 months. Those service standards matter twice: they tell you what to expect, and their breach - the report into the void, the identity leaked, the silence - is itself evidence about the employer, and sometimes the beginning of the penalisation story.

Question 3

Who or what is the Protected Disclosures Commissioner?

Accepted Answer

A statutory office (within the Ombudsman’s office) created by the 2023 reforms as the route for reports with nowhere obvious to go: the Commissioner receives disclosures and transmits them to the appropriate prescribed person or other suitable body - and can deal with reports where no suitable body exists. Hundreds of workers used it in its first year. For the worker unsure which regulator owns their wrongdoing, the Commissioner answers the routing question with statutory protection intact.

Question 4

Can I go to the media and stay protected?

Accepted Answer

Only through the statutory gate: public disclosure is protected where the stricter conditions are met - broadly, where you first reported through the proper channels and no appropriate action followed in time, or where reasonable belief of imminent/manifest danger to the public interest or of retaliation/evidence-suppression justifies going direct. The conditions are real and unforgiving, and a public disclosure outside them can forfeit protection entirely. If you are contemplating this route: advice first, genuinely - it is the highest-stakes channel decision in the Act.

Question 5

Should I take legal advice before reporting - and is that itself protected?

Accepted Answer

Yes and yes: disclosure to a legal adviser in the course of obtaining advice is itself a protected channel, so the conversation that plans your report is protected before the report exists. Pre-disclosure advice shapes everything that follows: whether your information is relevant wrongdoing or excluded grievance, which channel fits, what words establish reasonable belief, what record to create. The best whistleblower cases we see are the ones planned in that conversation; the hardest are the ones improvised.

Making a Protected Disclosure

The Channels, Mapped

Reporting Done Right: The Checklist

Thinking About Reporting?

Related Reading

Making a Disclosure - FAQs