Handling Whistleblowing Disclosures: A Guide for Managers

At some point, most managers will be the first person a worker turns to with a concern that goes beyond an ordinary complaint — something about a criminal offence, a breach of legal obligation, a danger to health and safety, or evidence that something is being covered up. Under the UK's whistleblowing framework, originally introduced by the Public Interest Disclosure Act 1998 and built into the Employment Rights Act 1996, a worker who makes this kind of "qualifying disclosure" in the public interest is legally protected from being subjected to detriment, and dismissal because of it is automatically unfair. This guide is specifically about what a manager who receives a disclosure needs to do — the moment it lands on your desk, not the general employee-facing question of when and how to speak up in the first place.

What Actually Counts as a Qualifying Disclosure

A qualifying disclosure is information a worker reasonably believes shows one or more of: a criminal offence, a breach of a legal obligation, a miscarriage of justice, danger to health and safety, damage to the environment, or the deliberate concealment of any of these. It doesn't need to be proven true at the point it's raised — the legal test is about the worker's reasonable belief, not certainty. As a manager, your job in the moment isn't to decide whether the disclosure is legally "qualifying" in a technical sense — that's a question for HR or legal advice if it's ever disputed. Your job is to recognise that something significant has potentially just been raised, and to respond accordingly rather than treating it as routine.

Step One: Acknowledge It Promptly

The first thing a worker needs from a manager who's just made a disclosure to them is a clear, prompt acknowledgement that it's been heard and taken seriously. This doesn't mean promising a particular outcome or agreeing with everything said — it means not brushing it off, not visibly reacting with irritation or defensiveness, and confirming that it will be looked into properly. A slow or dismissive initial response is one of the fastest ways to make a worker feel they have to escalate externally, which is generally worse for everyone than the concern being properly handled internally in the first place.

Step Two: Keep It Confidential — Need-to-Know Only

Confidentiality is central to handling a disclosure well. The worker's identity and the substance of what they've raised should only be shared with people who genuinely need to know in order to investigate or escalate it properly — not discussed casually with colleagues, not mentioned in a team meeting, and not something the manager processes out loud with people who have no role in dealing with it. Breaches of confidentiality, even unintentional ones, can expose the worker to exactly the kind of informal retaliation the law is designed to prevent, and can seriously damage the organisation's credibility if the disclosure later becomes more widely known to have been handled carelessly.

Step Three: Do Not Retaliate — Including Informally

Detriment because of a protected disclosure doesn't have to be a formal, obvious act like dismissal or a disciplinary sanction to be unlawful and damaging. It can be far subtler: quietly excluding someone from projects they'd normally be involved in, a cooler tone in day-to-day interactions, being passed over for opportunities without explanation, or simply being treated differently by colleagues who've heard something. Managers need to be conscious of their own reactions here — even an unconscious, low-level cooling toward someone who's just raised an uncomfortable concern can constitute detriment, and can be very difficult for the organisation to defend later if it's ever examined.

Step Four: Investigate Properly, or Escalate to the Right Channel

Depending on the nature of the disclosure and your organisation's policy, a manager may be expected to investigate directly, or — more often, for anything serious — to escalate it promptly to whoever the organisation has designated to handle whistleblowing concerns, such as HR, compliance, or a specific whistleblowing officer or channel. Trying to handle something well beyond your area of competence or authority, rather than escalating it, is a common and understandable mistake, but it can slow down a proper response and increase the risk of the issue being mishandled. Knowing your organisation's whistleblowing policy and escalation route before you need it is far better than trying to work it out under pressure.

The Risk of Getting It Wrong

Mishandling a disclosure carries real risk: to the worker, who may face detriment or feel forced to leave or escalate externally; to the organisation, which can face an employment tribunal claim with no compensation cap for genuine whistleblowing detriment or dismissal cases; and to the manager personally, whose own conduct in response to a disclosure can become a central issue if the matter is ever litigated. This is also an area sitting within the wider set of employer obligations reshaped by the Employment Rights Act 2025, making it worth keeping current on rather than relying on assumptions formed years ago.

A Simple Checklist for Managers

When a disclosure is made to you: listen without judgement and thank the person for raising it; don't promise an outcome you can't guarantee; write down what was said as soon as possible while it's fresh, factually and without embellishment; keep it confidential beyond those who genuinely need to know; escalate to the right internal channel promptly; and consciously monitor your own behaviour toward the worker afterwards to make sure nothing shifts, even subtly.

Frequently Asked Questions

Do I need to believe the disclosure is true before acting on it?

No — the legal protection turns on the worker's reasonable belief that the disclosure is true and in the public interest, not on whether it's ultimately proven correct, so a manager's role is to take it seriously and ensure it's properly looked into, not to make an instant judgement on the merits.

What if the disclosure is about me or my own conduct?

This is exactly the kind of situation where you should escalate immediately to HR or another appropriate channel rather than handling it yourself — investigating or responding to a disclosure about your own conduct creates an obvious conflict of interest.

Can a worker still be protected if they raise the concern informally, rather than through a formal process?

Generally yes — a qualifying disclosure doesn't have to follow a particular formal process to attract legal protection, which is exactly why managers need to recognise a genuine disclosure when it's raised informally and not dismiss it simply because it wasn't submitted through an official form.

How long should records of a disclosure be kept?

Records should be kept for as long as your organisation's data retention policy and any ongoing investigation or potential claim requires, with access restricted to those who genuinely need it — this is a question worth checking with HR or legal advice rather than assuming a default period.

Whistleblowing disclosures test whether an organisation's stated values hold up under pressure. How a manager responds in the first conversation — promptly, confidentially, and without any hint of retaliation — often matters as much to the outcome as the formal investigation that follows. Where an investigation involves pulling together an individual's personal data, it's worth reading alongside our guide to handling data subject access requests, since the two processes often run in parallel. Learnsignal's workplace compliance CPD courses cover whistleblowing and related manager-facing employment law topics in more depth.