UK Whistleblowing Law: A Complete Employer's Guide to PIDA 1998 [2025]

The Public Interest Disclosure Act 1998 — PIDA — is the cornerstone of UK whistleblower protection. It came into force in July 1999 and has been amended several times since, most significantly by the Enterprise and Regulatory Reform Act 2013 and the Small Business, Enterprise and Employment Act 2015.

PIDA creates legal protection for workers who make qualifying disclosures about wrongdoing. Workers who suffer detriment — or who are dismissed — as a result of making a protected disclosure have the right to bring an employment tribunal claim. Compensation is uncapped in dismissal cases. Detriment claims carry no qualifying service requirement.

Employment tribunal claims under PIDA have increased by 34% over the past five years, according to the Ministry of Justice tribunal statistics. The increasing profile of whistleblowing law, the expansion of no-win-no-fee employment legal services, and the growing awareness of worker rights among employees have all contributed to this trend.

For UK employers, PIDA compliance is not optional — and understanding what it requires is essential for HR Directors navigating this landscape.

---

Who Is Protected Under PIDA?

PIDA protects "workers" — a broader category than employees. The protected group includes:

• Employees (those with an employment contract)
• Workers (those who personally perform work under a contract but who are not self-employed businesses)
• Agency workers
• Home workers
• NHS practitioners
• Certain self-employed contractors in specified sectors
• Trainees on vocational or work experience schemes

Notably, PIDA does not protect genuinely self-employed individuals who provide services as independent businesses. However, the boundary between employment and self-employment is frequently disputed, and organizations that engage contractors for extended periods in employee-like roles face classification risk that is separate from but connected to PIDA.

Former employees are also protected — PIDA applies to disclosures made after employment ends where the disclosure relates to conduct during the employment period.

---

What Is a Protected Disclosure?

A disclosure is protected under PIDA when three conditions are met:

Condition 1: It is a qualifying disclosure

A qualifying disclosure is a disclosure of information that the worker reasonably believes tends to show one or more of the following:

1. A criminal offence — including fraud, theft, bribery, and any other conduct that is criminal under UK law. The criminal offence does not need to have occurred yet — a reasonable belief that it is likely to occur is sufficient.

2. Failure to comply with a legal obligation — any legal obligation, statutory or regulatory. This is a broad category that includes employment law violations, data protection breaches, health and safety regulatory non-compliance, financial services regulation breaches, and any other legal obligation binding on the employer.

3. A miscarriage of justice — a situation where a person has been convicted of an offence they did not commit, or where the justice process has been corrupted.

4. A danger to the health or safety of any individual — present or likely future danger, whether inside or outside the workplace. This has been interpreted broadly to include danger to third parties, customers, and the general public.

5. Damage to the environment — pollution, illegal dumping, environmental regulation breaches.

6. Deliberate concealment of information about any of the above — the cover-up is itself a qualifying subject matter, which means a worker who reports that their employer is suppressing information about a health and safety issue is making a qualifying disclosure even if the disclosure does not directly address the underlying issue.

The "reasonable belief" standard: The worker does not need to be correct in their belief that the information tends to show wrongdoing. They need only have a reasonable belief that it does. This is judged objectively — would a reasonable person in the worker's position have believed what they believed, based on the information available to them?

Condition 2: It is made in the public interest

Since the Enterprise and Regulatory Reform Act 2013, a qualifying disclosure must be made in the public interest to be protected. This requirement was introduced to prevent PIDA from being used to dress up personal employment grievances as whistleblowing.

"Public interest" does not require that the disclosure be in the interests of the general public. A disclosure about conduct affecting a group of workers — even a relatively small group — can satisfy the public interest requirement. The test is whether the worker reasonably believed that the disclosure was in the public interest at the time of making it.

Key cases since 2013 have established that:

• A single worker's personal interest in the outcome of their disclosure does not disqualify it from being in the public interest
• Disclosures about breaches of individual employment contracts can be in the public interest where the breach is systematic or affects other workers
• The public interest test is relatively easy to satisfy in practice — the 2013 amendment did not create a high bar

Condition 3: It is made to an appropriate recipient

A qualifying disclosure is protected only if it is made to an appropriate person or body. PIDA identifies several categories:

Internal disclosure (Tier 1): Disclosure to the employer, or to a person responsible for the failure within the organization. This is the most straightforward protected disclosure route and carries the least additional requirements.

Regulatory disclosure (Tier 2): Disclosure to a prescribed person or body. The Secretary of State for Business publishes a list of prescribed persons for specific subject matters. Key prescribed persons include:

• Financial Conduct Authority (financial services)
• Health and Safety Executive (health and safety)
• Information Commissioner's Office (data protection)
• Environment Agency (environmental matters)
• Care Quality Commission (healthcare and social care)
• Ofsted (education)
• His Majesty's Revenue and Customs (tax)

Wider disclosure (Tier 3): Disclosure to journalists, MPs, police, or other third parties. This category carries additional conditions — the worker must reasonably believe they would be subjected to a detriment if they disclosed to their employer or a prescribed person, or they must reasonably believe a cover-up is likely, or the matter must be exceptionally serious. Workers who skip internal and regulatory channels and go directly to the media without good reason lose some of their protection.

---

What Protection Does PIDA Provide?

Protection from detriment

A worker who makes a protected disclosure has a statutory right not to be subjected to any detriment by their employer on the ground of having made the disclosure. Detriment is broadly defined and includes:

• Disciplinary action
• Demotion or downgrade
• Exclusion from opportunities (training, promotion, projects)
• Increased scrutiny or monitoring
• Hostile treatment by management or colleagues where the employer has failed to take reasonable steps to prevent it
• Change of duties, hours, or location
• Negative performance reviews
• Threat of any of the above

A detriment claim can be brought without any qualifying service period — from day one of employment.

Protection from dismissal

Dismissal of an employee for making a protected disclosure is automatically unfair under the Employment Rights Act 1996 as amended by PIDA. This means:

• No qualifying service period is required (unlike ordinary unfair dismissal, which requires two years of service)
• Compensation is uncapped — there is no statutory cap on the amount a tribunal can award
• The employee does not need to prove they were dismissed solely because of the disclosure — the disclosure need only be the reason or principal reason for dismissal

For workers who are not employees (contractors, agency workers), the equivalent protection is against detriment rather than dismissal, but the practical effect is similar.

Interim relief

An employee who has been dismissed for making a protected disclosure can apply to an employment tribunal for interim relief — an order requiring the employer to reinstate or re-engage the employee pending the full tribunal hearing. Applications must be made within seven days of dismissal. Interim relief is a significant practical remedy that most employment law specialists advise considering in clear cases.

---

The Burden of Proof Under PIDA

In PIDA detriment and dismissal claims, the burden of proof operates differently from ordinary employment claims.

Once the worker establishes that:

1. They made a protected disclosure, and
2. They suffered a detriment or were dismissed

...the burden shifts to the employer to demonstrate that the protected disclosure played no part in the treatment received, or — in detriment cases — that the reason for the detriment was unconnected to the disclosure.

In practice, this means that every adverse employment action taken following a protected disclosure must be supported by documented, independently defensible rationale. The employer must be able to show that the same action would have been taken regardless of the disclosure.

Organizations that cannot produce this documentation — because adverse actions following a disclosure were not documented contemporaneously, or because the documentation that exists suggests connection to the disclosure — face a significantly harder defense.

---

What PIDA Does Not Cover

Several categories of disclosure are outside PIDA's protection:

Personal grievances. A complaint about how the worker personally is being treated — a dispute about pay, a personality conflict with a manager, dissatisfaction with a performance review — is not a protected disclosure unless it also discloses information that tends to show one of the qualifying subject matters. The distinction between a personal grievance and a whistleblowing disclosure is contested in many cases.

Non-qualifying subject matter. A disclosure that the worker's employer is doing something the worker disagrees with, but that is not illegal and does not fall into any of the qualifying categories, is not protected.

Bad faith disclosures. A disclosure made in bad faith — where the worker does not genuinely believe the information tends to show wrongdoing, and makes the disclosure for an ulterior motive — loses protection. However, bad faith is narrowly construed and is difficult for employers to establish as a defense.

Disclosures that breach national security. Disclosures that would be detrimental to national security are outside PIDA's scope.

---

What Employers Must Have in Place

PIDA does not mandate any specific organizational infrastructure — unlike the EU Whistleblowing Directive, which explicitly requires organizations with 50+ employees to maintain a formal reporting channel. However, the absence of infrastructure is regularly cited in tribunal proceedings as evidence of organizational failure, and the practical consequences of having no channel make the investment obvious.

Written whistleblowing policy. A policy that explains what employees can report, how they can report it, what protection they receive, and what the investigation process looks like. The policy should be communicated actively — not buried in the employee handbook.

Anonymous reporting channel. An accessible channel that employees can use without identifying themselves. In the context of PIDA, this matters because retaliation for making a protected disclosure is itself a PIDA claim — the easier it is to make disclosures anonymously, the harder it is for employers to identify and retaliate against reporters.

Investigation process. A documented process for how disclosures are received, assessed, investigated, and responded to. This process must be demonstrably independent where the disclosure involves senior management.

Training for managers and HR. Managers who receive protected disclosures verbally must know what to do. A manager who dismisses a protected disclosure, responds hostilely, or shares information with the subject of the disclosure creates both a PIDA claim and a separate disciplinary issue.

Record-keeping. Every disclosure received, every investigation conducted, and every outcome must be documented. This documentation is the primary evidence in any tribunal claim.

---

PIDA vs EU Whistleblowing Directive: Understanding Both for UK Organizations

Since Brexit, the EU Whistleblowing Directive (Directive 2019/1937) does not apply in Great Britain. UK organizations are governed by PIDA domestically.

However, UK organizations with operations in EU member states — subsidiaries, branches, or employees based in the EU — are subject to the EU Directive's requirements in those jurisdictions. Each EU subsidiary with 50 or more employees must have a compliant reporting channel meeting the Directive's six requirements.

UK organizations with EU operations therefore face dual compliance obligations: PIDA domestically and the relevant EU national transposition for each EU jurisdiction where they operate.

A single reporting channel — one that meets both PIDA best practice and EU Directive requirements — is the most efficient solution. Platforms that provide the technical anonymity, automated acknowledgment, two-way anonymous communication, and audit trail required by the Directive also satisfy the infrastructure expectations of PIDA best practice.

---

VoxWel: Built for UK Employers

VoxWel was designed with UK and EU compliance requirements at its core. The platform satisfies PIDA best practice — genuine technical anonymity, accessible reporting, documented workflow, and audit trail — while meeting all six requirements of the EU Whistleblowing Directive for organizations with EU operations.

For UK employers with employees across multiple EU jurisdictions, VoxWel provides a single reporting platform that covers both regulatory frameworks.

At £1 per employee per month, VoxWel is the most cost-effective professional reporting infrastructure available for UK employers of any size.

Start a 14-day free trial at voxwel.com.

---

VoxWel is an anonymous employee reporting platform. Learn more at voxwel.com.