Protected Disclosure (UK)
A specific legal term under UK employment law for a qualifying disclosure of information about wrongdoing, made through the right channel and in the right way, that triggers full statutory protection against retaliation under the Public Interest Disclosure Act 1998.
- What Is a Protected Disclosure?
- The Two-Step Legal Test for Protected Disclosures
- Disclosure of Information vs. Allegation: The Key Distinction
- Prescribed Persons: External Reporting Channels
- What Employers Must Do About Protected Disclosures
- Taking a Protected Disclosure Claim to an Employment Tribunal
- Recent Developments in UK Protected Disclosure Law
- Frequently Asked Questions About Protected Disclosures in the UK
What Is a Protected Disclosure?
Key Takeaways
- ✓A protected disclosure is a qualifying disclosure made through a channel recognized by PIDA, giving the worker full legal protection against detriment and unfair dismissal.
- ✓It must involve a 'disclosure of information,' not merely an allegation or opinion. Saying 'I think the manager is dodgy' isn't enough. Saying 'I saw the manager submit fake expense claims totaling 5,000 GBP' is.
- ✓The disclosure must relate to one of six categories: criminal offences, legal obligation failures, miscarriages of justice, health and safety dangers, environmental damage, or deliberate concealment of any of these.
- ✓The worker must reasonably believe the disclosure is made in the public interest (not solely a personal grievance).
- ✓Where the disclosure is made (employer, regulator, media) determines the specific conditions for protection.
Protected disclosure is the legal term that separates workplace whistleblowing from ordinary complaints. Under UK law, not every report of wrongdoing qualifies. The disclosure must tick specific boxes: it must contain actual information (not just allegations), relate to defined categories of wrongdoing, be made in the public interest, and be communicated through an appropriate channel. When all these conditions are met, the disclosure is 'protected,' and the worker gains statutory rights against retaliation. The concept was created by the Public Interest Disclosure Act 1998, which inserted Sections 43A through 43L into the Employment Rights Act 1996. These sections define what a qualifying disclosure is, who can make one, where it can be made, and what protections follow. The distinction between a 'qualifying disclosure' and a 'protected disclosure' is subtle but important. A qualifying disclosure is one that meets the content requirements (relates to wrongdoing, reasonable belief, public interest). A protected disclosure is a qualifying disclosure that is also made through the right channel. Only protected disclosures trigger the full range of statutory protections.
The Two-Step Legal Test for Protected Disclosures
Employment Tribunals apply a two-step test to determine whether a disclosure qualifies for protection.
Step 1: Is it a qualifying disclosure?
The worker must show three things. First, there was a 'disclosure of information.' The key case here is Cavendish Munro Professional Risks Management Ltd v. Geduld (2010), which held that a disclosure must convey information, not simply state an allegation. 'The company is breaking the law' is an allegation. 'The company has been dumping chemical waste in the river every Thursday night' is information. Second, the worker must have a reasonable belief that the information tends to show one of the six categories of wrongdoing. Third, since the 2013 amendment, the worker must reasonably believe the disclosure is in the public interest.
Step 2: Was it made through a protected channel?
PIDA recognizes several channels, each with its own conditions. Disclosures to the employer or a responsible person are the easiest to protect. Disclosures to prescribed persons (regulators) require the worker to reasonably believe the information falls within the regulator's remit. Disclosures to legal advisers in the course of obtaining legal advice are automatically protected. Wider disclosures (to the media or public) must meet additional conditions including that the disclosure wasn't made for personal gain and was reasonable in all the circumstances.
Disclosure of Information vs. Allegation: The Key Distinction
One of the most litigated aspects of protected disclosure law is the boundary between 'information' and 'allegation.' This distinction can make or break a whistleblowing claim.
The Cavendish Munro principle
In Cavendish Munro (2010), the EAT held that simply making a complaint or allegation isn't a disclosure of information. There must be specific facts conveyed. However, subsequent cases have softened this distinction. In Kilraine v. London Borough of Wandsworth (2018), the Court of Appeal ruled that the distinction between 'information' and 'allegation' isn't as rigid as previously thought. A statement can be both an allegation and a disclosure of information. The key question is whether the communication contains sufficient factual content and specificity to qualify as information.
Practical implications for workers
When making a disclosure, be specific. Don't just say 'there's fraud happening.' Say 'I've observed that invoice numbers 4521, 4522, and 4523 from Supplier X were approved despite no goods being received, and the approval was signed by [name] on [dates].' The more factual detail you provide, the stronger your position that you disclosed information rather than merely aired a suspicion. Put it in writing where possible, and keep your own copies.
Prescribed Persons: External Reporting Channels
The UK government maintains a list of prescribed persons, regulators and bodies to whom workers can make qualifying disclosures outside their own organization.
| Prescribed Person | Area of Responsibility |
|---|---|
| Health and Safety Executive (HSE) | Workplace health and safety, hazardous substances |
| Financial Conduct Authority (FCA) | Financial services regulation, market conduct |
| Prudential Regulation Authority (PRA) | Safety and soundness of banks, insurers, major investment firms |
| Care Quality Commission (CQC) | Health and social care standards in England |
| Environment Agency | Environmental protection, waste management, pollution |
| HM Revenue and Customs (HMRC) | Tax fraud, National Minimum Wage violations |
| Information Commissioner's Office (ICO) | Data protection, freedom of information |
| National Crime Agency (NCA) | Serious and organized crime |
| Serious Fraud Office (SFO) | Serious or complex fraud, bribery, corruption |
What Employers Must Do About Protected Disclosures
While PIDA doesn't impose a blanket statutory duty on all employers to have whistleblowing procedures, several regulatory frameworks do, and good practice demands it.
Establish clear internal reporting procedures
Create a whistleblowing policy that explains what qualifies as a protected disclosure, how to make one, who receives disclosures, what happens after a disclosure is made, and how the organization protects reporters from retaliation. Make the policy accessible to all workers (including agency staff and contractors) and review it annually.
Train managers and investigators
Managers are often the first recipients of disclosures, and they frequently don't recognize them. Training should cover the legal definition of a qualifying disclosure, how to respond in the moment (listen, don't dismiss, don't promise outcomes you can't deliver), how to preserve confidentiality, and when to escalate to compliance or legal teams. Investigators need specific training on impartiality, documentation, and the handling of sensitive information.
Monitor for detriment after disclosures
The employer's obligation doesn't end when the investigation closes. Workers who make disclosures are at elevated risk of detriment for months or even years afterward. HR should actively monitor the worker's treatment: performance reviews, assignments, promotions, and day-to-day interactions. If a manager who was the subject of a disclosure starts treating the reporter differently, HR needs to intervene before it becomes a tribunal claim.
Taking a Protected Disclosure Claim to an Employment Tribunal
When a worker believes they've suffered detriment or dismissal because of a protected disclosure, the Employment Tribunal is the primary forum for resolving the claim.
Time limits
Claims must be filed within three months (less one day) of the act of detriment or the effective date of termination. Before filing, the worker must notify ACAS and go through the Early Conciliation process. The ACAS notification stops the clock for up to six weeks, extending the overall filing window. Missing the deadline is fatal to the claim in most cases, though tribunals have limited discretion to extend time where it's 'just and equitable' to do so.
Burden of proof
For detriment claims, the burden is on the employer to show that the treatment was not on the ground of the protected disclosure. For dismissal claims, the employee must show that making a protected disclosure was the principal reason for dismissal. The burden then shifts to the employer to demonstrate a genuine, non-retaliatory reason. Tribunals look at the timing of the adverse action, any inconsistency in the employer's explanation, and whether the employer's treatment of the worker changed after the disclosure.
Remedies
Successful claimants can receive a declaration that the disclosure was protected, compensation for financial loss (uncapped for dismissal claims), compensation for injury to feelings (assessed using the Vento guidelines), and in some cases, a recommendation that the employer take specific steps. Reinstatement or re-engagement orders are available but rarely made. The average award in successful whistleblowing claims varies widely, from a few thousand pounds for minor detriment to six- or seven-figure sums in serious dismissal cases.
Recent Developments in UK Protected Disclosure Law
UK whistleblowing law continues to evolve through case law and legislative proposals.
The EU Whistleblower Directive
Although the UK left the EU before the Directive's transposition deadline, the EU Whistleblower Directive (2019/1937) is relevant for UK businesses operating in EU member states. The Directive requires organizations with 50 or more employees to establish internal reporting channels and respond within three months. It also creates protections for a broader range of individuals than UK law currently covers, including shareholders, volunteers, and job applicants. UK employers with EU operations need dual compliance.
Calls for reform
The charity Protect (formerly Public Concern at Work) and other organizations have called for a standalone Office of the Whistleblower to oversee compliance and support reporters. Proposals also include extending PIDA protection to job applicants and volunteers, creating a duty on employers to investigate disclosures, and introducing penalties for organizations that fail to have adequate whistleblowing procedures. As of 2026, the government has consulted on several of these proposals but hasn't introduced legislation.
Frequently Asked Questions
Can a verbal statement be a protected disclosure?
What if my disclosure was partly motivated by a personal grievance?
Does my employer need to tell me the outcome of the investigation?
Can I make a protected disclosure after I've left the organization?
Are disclosures made to my trade union representative protected?
Written by Adithyan RK