Speaking Up, Paying Out: Two Paths for UK Whistleblowing Reform
Should the UK do more to protect whistleblowers, or start paying them generous rewards for their information?
On 12 October 2026, the UK government opened a consultation on updating the UK whistleblowing framework (the Consultation). The Consultation acknowledges upfront that the UK’s current whistleblowing framework under the Public Interest Disclosure Act 1998 (PIDA) “may no longer work as intended” in light of a series of major UK scandals.
The government is therefore inviting views on a wide range of options for reform. Some of these options would see the UK emulate the EU Whistleblowing Directive (EUWD), which offers an enhanced level of statutory protection against retaliation for those who speak up. More radical would be the adoption of a US-style whistleblower rewards programme, administered by the Serious Fraud Office (SFO). The government may ultimately choose a combination of the EU and US approaches.
The Consultation could bring a sea change in the UK’s approach to whistleblowing, which has typically relied on conscience (rather than cash) to incentivise reporting. This article provides key takeaways from the Consultation and an in-depth comparison of whistleblowing schemes in major jurisdictions.
The EU Approach: Whistleblower Protection
Wider scope. The PIDA applies a narrower scope than the EUWD, excluding self-employed professionals and volunteers. In recent cases, claimants such as charity trustees and local council job applicants failed to obtain protection in the UK. The government seeks views on extending coverage based on factors including how likely a group is to encounter wrongdoing and how vulnerable it is to retaliation. It notes that some groups, such as volunteers, may not meet these criteria, while certain self-employed people may have “a stronger case for protection”. Based on these comments, it seems unlikely that any UK proposal will fully match the broad scope of protection under the EUWD.
Reporting routes and subject matter. The EU model treats internal and external reports alike. In Germany, for example, whistleblowers may choose freely between routes (although employers should encourage internal reporting first), and the same reasonable-belief standard applies to every route. In the UK, however, a whistleblower reporting to a prescribed person, such as a regulator, must reasonably believe the information is “substantially true”. The Consultation is seeking views on removing this condition, and proposes new categories of protected disclosure covering AI-related risks and misuse of public funds.
Protection against retaliation. At the core of the EU model is protection against retaliation. In Germany, for example, retaliation (including threats and attempts) is prohibited, and a detriment following a report is presumed to be retaliation unless the employer proves otherwise. Whistleblowers can claim damages, and companies face fines of up to €500,000. German courts have, however, required whistleblowers first to establish a compliant report and a subsequent detriment, and have allowed employers to rebut the presumption. The UK Consultation instead focuses on a possible offence of intimidating whistleblowers.
Mandatory procedures. Other than in certain regulated sectors, such as larger financial services firms subject to FCA and PRA rules and businesses covered by the Money Laundering Regulations 2017, most UK employers do not need to operate whistleblowing procedures. In practice, however, an effective hotline is strongly recommended by government guidance on the failure to prevent bribery, tax evasion, and fraud offences, and on corporate compliance programmes. The Consultation offers two options: more detailed non-statutory guidance, or an EU-style statutory duty to have effective procedures and follow up on disclosures. The first option is expressly framed as avoiding new burdens on employers, suggesting that the government is reluctant to add (or be seen to be adding) red tape for UK businesses.
Office of the Whistleblower. Some stakeholders, echoing past private members’ bills, favour a UK body similar to the EU’s national whistleblowing authorities. The government’s initial view, however, is against this, citing cost and duplication with existing bodies.
The US Approach: Financial Rewards
US agencies, including the Securities and Exchange Commission (SEC), the Department of Justice (DOJ), and the Commodity Futures Trading Commission (CFTC), run established whistleblower reward schemes, most paying 10% to 30% of sums recovered at the end of criminal proceedings or civil settlement negotiations. The largest SEC award to date is $279 million.https://www.sec.gov/newsroom/press-releases/2023-89. On 20 October 2026, DOJ announced a new whistleblower reward scheme focused on fraud in healthcare and certain other government programmes, targeting the areas of hospice, home healthcare, day care, and special services fraud.https://www.justice.gov/fraud/national-fraud-enforcement-division-criminal-tip-rewards-pilot-program. Awards under this new programme are capped at $30,000 but can be paid out (at DOJ’s discretion) following the filing of criminal charges — meaning that whistleblowers can get paid before enforcement proceedings have concluded.
UK schemes are far more limited: HM Revenue & Customs (HMRC) rewards are entirely discretionary,https://www.gov.uk/guidance/reporting-serious-tax-avoidance-or-evasion. and the Competition and Markets Authority (CMA) cartel informant awards are capped at £250,000.https://www.gov.uk/government/news/blowing-the-whistle-on-cartels.
The SFO has led the debate on incentives. In February 2024, then-SFO Director Nick Ephgrave backed paying whistleblowers as a faster route to “‘smoking gun’ evidence” in long-running cases.https://www.gov.uk/government/speeches/director-ephgraves-speech-at-rusi-13-february-2024. A recent UK independent review recommended:https://www.gov.uk/government/publications/fraud-in-the-digital-age. (i) allowing the SFO to reward whistleblowers financially, (ii) sanctioning offences of knowingly making false reports and of intimidating whistleblowers, and (iii) establishing an independent arbitration panel to hear appeals.
Recent statistics help explain the appeal. Qualifying whistleblowing disclosures to the SFO typically range between 150 and 350 a year, with a marked uptick in recent years. The SEC, by contrast, received about 27,000 tips in 2025, up from 24,980 in 2024 (albeit, in each case, approximately half were submitted by just two individuals).Approximately 12,000 of the 2025 tips, and 14,000 of the 2024 tips, were submitted by the same two individuals: https://www.sec.gov/files/fy25-annual-whistleblower-report.pdf; https://www.sec.gov/newsroom/press-releases/2024-186. Reward sceptics may say the recent uptick shows awareness and culture already driving increased reporting, making rewards unnecessary. Proponents will reply that UK whistleblowers are going to report to US agencies instead: Ephgrave noted that “since 2012, over 700 UK whistleblowers have engaged US law enforcement”, and the Consultation concedes that UK nationals are “the second largest overseas user group of the SEC scheme”.
The Consultation seeks views on the design of any reward scheme, including whether the SFO should decide both eligibility and award size. It asks whether a false-reporting offence is needed to deter abuse; this is a known problem in the US, where a specialist whistleblower legal practice has emerged and companies can face claims of uncertain merit backed by threats to go to the authorities. It also asks whether an intimidation offence would add to existing offences such as harassment, and what appeal routes, if any, an arbitration panel should offer beyond the criminal justice system.
Looking Ahead: Implications for Companies
The Consultation closes on 8 January 2027, with a government response expected later in 2027. The government cites evidence that rewards increase both the quantity and quality of reports; whether they would improve the quality, not merely the volume, of information reaching the SFO remains to be seen.
There would be immediate implications for companies of a more motivated set of whistleblowers. Companies would want to ensure their internal reporting channels remain effective, so that concerns surface internally and can be investigated quickly, before a whistleblower goes to the SFO. The Consultation suggests that increased prospects of employee reporting may push companies to identify and self-report wrongdoing early. This fits the SFO’s April 2025 corporate guidance, under which a prompt self-report and full cooperation bring an automatic invitation to negotiate a deferred prosecution agreement, save in exceptional circumstances.
Whistleblowing Regimes Compared: EU, Germany, US, and UK
|
EU |
GermanyGermany is included as an illustration of the EUWD being implemented into national law at the Member State-level. |
US |
UK |
|
|
Key legislation |
EU Whistleblowing Directive (EUWD): All 27 Member States have transposed the EUWD into national law. Member States have used the flexibility the EUWD allows — see Germany as an example. |
German Whistleblower Protection Act (Hinweisgeberschutzgesetz or HinSchG). |
Various federal statutes, including Sarbanes-Oxley, Dodd-Frank, and the False Claims Act. Additional legislation includes programmes established by agencies. |
Current Public Interest Disclosure Act (PIDA) and Employment Rights Act 1996 (ERA). |
|
Consultation N/A |
||||
|
Who is protected? |
Most comprehensive scope, covering all natural persons who obtain information about breaches in connection with their professional activity (or before it begins). Includes employees / self-employed contractors, former employees, trainees, and job applicants. Also covers people who assist whistleblowers, and connected third parties who suffer retaliation. |
Same as EUWD. Whistleblowers can claim damages, contractual restrictions of these rights are void, and fines of up to €50,000 apply (up to €500,000 for companies via § 30(2) sentence 3 OWiG). Case law limits the presumption: the whistleblower must first set out in detail, and if necessary prove, a HinSchG-compliant report and a subsequent detriment. |
Each federal statute / whistleblower scheme has its own eligibility criteria. |
Current Section 43K of the ERA sets out a list that includes all “workers”, trainees, certain roles within the NHS and police, LLP members, and judicial office holders. |
|
Consultation Extension to other groups — likely including certain self-employed individuals, but not volunteers. |
||||
|
Which disclosures are protected? |
Disclosures related to actual or potential breaches of EU law in specified policy areas. Member States may provide for a wider scope of protection under national law — and many (including Germany) have gone well beyond the specified EU policy areas. |
In addition to the policy areas specified in the EUWD, the HinSchG covers all criminal offences, administrative offences where the provision breached serves to protect life, limb or that relate to life, health, or the rights of employees or their representative bodies, employees’ rights, and corporate tax breaches and abusive tax arrangements. |
This depends on the relevant federal statute (e.g., Sarbanes-Oxley and Dodd-Frank cover breaches of securities laws, and the False Claims Act covers fraud on the government). |
Current Disclosures related to a criminal offence, breach of a legal obligation, a miscarriage of justice, danger to health or safety, damage to the environment, or the deliberate cover-up of any of the above. Sexual harassment added by the Employment Rights Act 2025. |
|
Consultation Addition of other categories of wrongdoing to cover risks to public safety / national security arising from AI, and the misuse of public funds / abuse of public authority. |
||||
|
Eligibility criteria |
Reports must be made via a legally recognised channel. Whistleblowers must have reasonable grounds to believe the information they reported was true. The relevant breach must fall within the scope of the EUWD (see row above). |
Same as EUWD. There is no public interest test, and whistleblowers may choose freely between internal and external reporting. |
This depends on the relevant federal statute. |
Current Whistleblower must reasonably believe their disclosure is “in the public interest”. Concerns must be raised internally or to a “prescribed person” — the latter being subject to additional conditions. |
|
Consultation Taking steps to clarify the meaning of the public interest test. Removing additional conditions for reporting externally to a prescribed person and / or creating a new route for reporting to trade unions |
||||
|
Mandatory procedures? |
Minimum standards apply to all public-sector employers and private-sector employers with 50 or more employees. Requirements cover confidentiality, accepting reports in writing or orally, acknowledgement of reports, impartial handling, and feedback to the whistleblower on action taken. |
All employers with, as a rule, 50 or more employees — including public employers — must set up internal reporting channels and comply with certain minimum standards, including acknowledging whistleblower reports within seven days and giving feedback within three months. Private employers with 50 to 249 employees may share a reporting office. Internal channels must accept reports orally or in text form, and a whistleblower may request an in-person meeting. There is no obligation to allow for anonymous reporting, but anonymous reports should be processed. Failure to establish and operate an internal reporting channel is an administrative offence (fine of up to €20,000). Certain regulated financial services firms must have internal channels regardless of their size. |
Whistleblowing procedures are not universally mandated for employers. Listed US companies must provide a facility for employees to submit concerns regarding specified matters. Compliance requirements imposed on companies contracting with federal agencies may effectively mandate internal reporting procedures. |
Current No general requirement exists, but maintaining an effective whistleblowing hotline is recommended by government guidance on the failure to prevent bribery, tax evasion, and fraud offences. Specific rules apply for certain regulated sectors, including larger financial services firms (FCA and PRA rules) and businesses covered by the Money Laundering Regulations 2017. |
|
Consultation Mandatory minimum requirements for all public-sector employers and private-sector employers with 50 or more employees |
||||
|
Office of the Whistleblower |
EUWD requires all Member States to create national whistleblowing bodies to receive whistleblowing reports, request further information from employers, and support whistleblowers. Such bodies may also enforce the mandatory requirements as to whistleblowing procedures. |
The main external reporting office sits within the Federal Office of Justice (Bundesamt für Justiz). The Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht or BaFin) and the Federal Cartel Office (Bundeskartellamt) are responsible for whistleblower reports relevant to their own sectors. |
No overarching federal whistleblowing authority exists, but many US regulators that administer whistleblower reward schemes have a whistleblowing office to receive reports (including the SEC, CFTC, and Internal Revenue Service (IRS)). |
Current N/A |
|
Consultation Creating a UK office of the whistleblower — similar to the EUWD model The government is not in favour of this option and believes stakeholders’ concerns can instead be addressed via the proposals set out above. |
||||
|
Whistleblower incentives |
No EU-level whistleblower rewards scheme exists. Some Member States have schemes for certain types of misconduct (e.g., cartels). |
No whistleblower rewards scheme exists. The HinSchG addresses false reports through two mechanisms: (a) whistleblowers are liable for damage caused by reports made with intent or gross negligence; and (b) only knowingly disclosing false information publicly is an administrative offence. |
Various schemes run by different regulators and enforcement agencies, including the SEC, CFTC, and IRS. DOJ introduced its own scheme in 2024, which was extended in 2025 and 2026. Schemes award the whistleblower a percentage of the fine/forfeiture from a successful prosecution or settlement (typically 10%-30%). A new DOJ programme allows for smaller financial incentives ($10,000-$30,000) at the time of charging. |
Current N/A — other than schemes run by HMRC and the CMA |
|
Consultation It proposes a new scheme that would offer rewards for significant and original information provided to the SFO and which leads to a successful enforcement outcome. Rewards would be calculated as a percentage of the relevant financial penalty. New criminal offences may be imposed for providing false information under the scheme or intimidating someone who provides information under the scheme. |
This post was prepared with the assistance of Benjamin Suen in the London office of Latham & Watkins.