Sample Whistleblower Protection Policy

How to use this template

1. Read the whole policy first

   Some sections make promises that depend on channels you may not have yet.

2. Replace every placeholder

   Anything shown as [like this] is yours to fill in — organization name, contact details, and the channels in section 3.

3. Have legal counsel review it

   Requirements vary by jurisdiction and sector; this template is a starting point, not advice.

4. Distribute it, and say where the channels are

   A policy nobody can find is the most common way a speak-up programme fails quietly.

1. Purpose and scope

This Whistleblower Protection Policy is designed to:

• Encourage employees to report concerns about potential violations
• Protect employees who make good-faith reports
• Ensure compliance with applicable laws and regulations
• Maintain the organization's ethical standards

This policy applies to all employees, contractors, and stakeholders of [Organization Name].

2. Definitions

• Whistleblower

  An employee who reports potential violations of laws, regulations, or company policies.

• Protected disclosure

  A report made in good faith about potential violations, including but not limited to financial misconduct, safety violations, environmental concerns, discrimination or harassment, and other illegal or unethical activities.

• Retaliation

  Any adverse action taken against an employee for making a protected disclosure, including termination or demotion, reduction in pay or benefits, unfavorable work assignments, and harassment or intimidation.

3. Reporting procedures

3.1 Reporting channels

Employees can report concerns through any of the following channels:

• Direct supervisor or manager
• Human Resources department
• Compliance officer
• Anonymous hotline: [Phone Number]
• Online reporting system: [URL]

3.2 Report content

Reports should include:

• Description of the concern
• Relevant dates and times
• Names of individuals involved
• Supporting documentation, if available
• Contact information — optional for anonymous reports

4. Investigation process

1. Initial review
   • Assess report credibility
   • Determine appropriate response
   • Assign investigation team
2. Investigation
   • Gather relevant information
   • Interview involved parties
   • Review documentation
   • Maintain confidentiality
3. Resolution
   • Determine findings
   • Implement corrective actions
   • Document outcomes

5. Protection against retaliation

This policy strictly prohibits retaliation against whistleblowers. Employees who believe they have experienced retaliation should:

1. Report the retaliation immediately

   Through any of the channels in section 3.

2. Document all incidents

   Dates, what happened, and who was present or aware.

3. Contact the compliance officer

   Details are in section 7.

6. Confidentiality

All reports will be handled with appropriate confidentiality. However, complete anonymity cannot be guaranteed if:

• Legal action is required
• Law enforcement is involved
• Internal investigation requires disclosure

7. Contact information

• Compliance officer

  [Name]

• Email

  [Email Address]

• Phone

  [Phone Number]

• Address

  [Physical Address]

8. Policy review and updates

This policy will be reviewed annually and updated as needed to ensure compliance with:

• Changes in laws and regulations
• Organizational changes
• Best practices
• Lessons learned from investigations