Which companies must have a whistleblower policy?

Public companies, large proprietary companies (meeting two of: revenue over $50 million, assets over $25 million, or 100+ employees), and corporate trustees of registrable superannuation entities must have a whistleblower policy. However, all companies benefit from having one as it demonstrates good governance and can help detect issues early.

What protections do whistleblowers receive in Australia?

Whistleblowers receive identity protection (their identity must not be disclosed except in limited circumstances), protection from civil, criminal, and administrative liability for making the disclosure, protection from retaliation (it is illegal to victimise or threaten a whistleblower), and the right to seek compensation for any damage suffered as a result of retaliation.

Can anonymous disclosures receive whistleblower protection?

Yes, anonymous disclosures can qualify for whistleblower protection under the Corporations Act. The whistleblower does not need to identify themselves to receive legal protections. However, providing contact details (even through a secure channel) can facilitate investigation and enable the company to provide updates on the outcome.

Book Free Assessment Calculator

Whistleblower Protection

Also known as:whistleblower programwhistleblower legislationprotected disclosure

Legal protections for individuals who report suspected misconduct, illegal activity, or dangers within an organisation, shielding them from retaliation and adverse consequences.

In-Depth Explanation

Whistleblower protection in Australia provides legal safeguards for individuals who disclose information about misconduct within organisations. The Treasury Laws Amendment (Enhancing Whistleblower Protections) Act 2019 significantly strengthened protections for corporate and tax whistleblowers.

Key protections for whistleblowers:

Confidentiality: The identity of the whistleblower must be protected
Protection from retaliation: Unlawful to victimise, threaten, or cause detriment to a whistleblower
Compensation: Whistleblowers can seek compensation for damage caused by retaliation
Legal immunity: Whistleblowers are protected from civil, criminal, and administrative liability for making the disclosure

Who can be a whistleblower:

Current or former employees
Officers and directors
Contractors, suppliers, and their employees
Associates of the company
Relatives and dependants of any of the above

Eligible disclosures must relate to:

Misconduct or an improper state of affairs
Contravention of Commonwealth legislation (Corporations Act, ASIC Act, etc.)
Danger to the public or the financial system
Tax-related misconduct (to the ATO or a registered tax agent)

Whistleblower policy requirements:

Public companies, large proprietary companies, and corporate trustees of registrable superannuation entities must have a whistleblower policy
The policy must include information about protections, how to make disclosures, how disclosures will be investigated, and support available to whistleblowers

Penalties for retaliating against whistleblowers include imprisonment (up to 6 months or 2 years depending on the offence) and significant civil penalties.

Business Context

A robust whistleblower program helps businesses detect and address misconduct early, meet legal obligations, and demonstrate a culture of integrity and accountability.

How Clever Ops Uses This

Clever Ops helps Australian businesses implement compliant whistleblower programs, including secure anonymous reporting channels, case management workflows, investigation tracking, and policy documentation. We build systems that protect whistleblower identity while ensuring proper investigation and resolution.

Example Use Case

"A company implements a secure, anonymous whistleblower reporting platform with automated case routing to the appropriate investigation officer, maintaining confidentiality throughout the process."