Whistleblowers and Organisations

What is a protected disclosure?



Who can make a protected disclosure and be a whistleblower?


The whistleblower regime protects a number of different types of people if they choose to make a disclosure.  A person is able to make a disclosure if they are:

  • A member or former member of a registered organisation
  • An officer or former officer of a registered organisation
  • An employee or former employee of a registered organisation
  • A person who has or has had a contract for supply of goods or services or has or has had any other transaction with the organisation or branch, or its officers or employees
  • An officer, former officer, employee or former employee of the person who has the contract or transaction

This is a very wide list of people who are able to contact an agency to make a disclosure.  However to be protected the disclosure must be made to the right person and be about ‘disclosable conduct’.


What is ‘disclosable conduct’?  What can a whistleblower disclose?

While any information can be voluntarily given to an agency, only certain disclosures are protected within the RO Act.  These include disclosures that the person:

  • suspects on reasonable grounds
  • which indicate that an organisation, a branch, or its officers or employees may have contravened a provision of the RO Act, the Fair Work Act, the Competition and Consumer Act 2010 or constitutes an offence against a law of the Commonwealth.

If all these things are present, the disclosure could be protected under the RO Act if it is made to the right person. 

Who does the whistleblower need to disclose to?


The person must make the disclosure to one of the following:

  • The Commissioner or the staff of the ROC
  • The General Manager or the staff of the FWC
  • An FWC Member
  • The ABCC Commissioner, their Deputy or an inspector of the ABCC
  • The staff of the FWO

Any of these people are able to hear a disclosure from a whistleblower and it will trigger the whistleblower process.

A whistleblower is also able to give the information to their lawyer and have their lawyer contact one of the people in the above list with the information.

A person does not need to use the word ‘whistleblower’ to be protected however it may help the agency receiving the information to recognise the importance of the disclosure.  The person also has no obligation to give the agency their name or contact details, however this can have implications for whether a disclosure is investigated.

What happens next?

Whistleblower disclosures must be investigated unless an ‘authorised official’ determines that it fits one of the exceptions in the regulations.

The RO Act has very short timeframes that an agency must stick to.


Extensions of time can be sought if more time is needed to complete an investigation. 

The first step will be for the agency to allocate the disclosure to an authorised official who will be either:

  • The Commissioner
  • The General Manager of the FWC
  • An FWC Member
  • The Fair Work Ombudsman

It may not be the person in charge of the agency that the whistleblower contacted; agencies are able to allocate the disclosure to another agency.

Once the disclosure is allocated the investigation will begin unless the authorised official believes that it fits one of the prescribed reasons in the Regulations.  These include:

  • the information does not, to any extent, concern serious disclosable conduct;
  • the disclosure is frivolous or vexatious;
  • the discloser has informed the investigator that the discloser does not wish the investigation to be pursued, and the investigator is reasonably satisfied that there are no matters concerning the disclosure that warrant investigation;
  • it is impracticable for the disclosure to be investigated:
    • because the discloser’s contact details have not been disclosed;
    • or because the discloser refuses or fails, or is unable, to give, for the purposes of the investigation, such information or assistance as the investigator asks the discloser to give;
    • or because of the age of the information;
  • because the information is being, or has been, dealt with adequately in another manner. There is a table at regulation 176G detailing when the information is dealt with adequately in another manner.

While a whistleblower can keep their identity anonymous, it may impact on whether the investigation is continued by the authorised official.

A person who makes a disclosure, and provided their contact details, will be notified of the steps as the process progresses.

Who is notified and when?  The discloser?  The organisation?  Is it anonymous?

The person who makes a disclosure can seek to remain anonymous, however they will not be contacted by the agency with updates on the investigation.  Additionally if the agency requires more information or finds that it is impractical to progress the investigation because they cannot contact the whistleblower this may result in the investigation being discontinued or not started.

If the person who makes a disclosure provides their name and contact information the agency will provide notifications to the person when:

  • it is allocated to the authorised officer
  • the investigation commences
  • the investigation is discontinued
  • an extension of time is granted
  • the investigation is completed

The organisation may be contacted, if required, as part of the investigation.  This may involve sharing details of the disclosure to the organisation to ensure that they are able to properly answer the allegations made against them.  In some cases, this may involve identifying the whistleblower to the organisation.  There is no guarantee under the RO Act of anonymity, however, there are times when the agencies need to seek the whistleblower’s consent to disclose their information.

There are however, protections against reprisals.

What are reprisals and what are the penalties for breaching protections of whistleblowers?

If a person makes a disclosure they are protected against reprisals being taken against them for making that disclosure.  The whistleblower is protected against many types of conduct including:

  • any civil or criminal liability for making the disclosure (the person may still be liable for their conduct revealed by the disclosure)
  • any contractual or other remedy being enforced on the basis of the disclosure
  • any form of reprisal, which is detriment being caused by another person because they made the disclosure, including:
    • dismissal
    • injury in their employment
    • discrimination between them and other employees
    • harassment or intimidation
    • harm or injury (including psychological injury)
    • damage to property
    • damage to reputation

The list is not exhaustive and other forms of detriment, caused by action or inaction, may also be protected against.

What are the civil and criminal penalties for breaching the protections of whistleblowers?


The Federal Court or Federal Circuit Court can order significant civil remedies including:

  • compensation for loss, damage or injury
  • injunctions to prevent, stop or remedy the effect of reprisals or threats
  • an order requiring an apology
  • reinstatement
  • exemplary damages
  • any other order the court things appropriate

There are also civil penalties of up to 100 penalty units for taking or threatening to take a reprisal against a whistleblower.

Finally there are criminal offences that attach to the protections.  A person commits an offence if they take or threaten a reprisal against a whistleblower and the reason for the reprisal was their belief that the whistleblower made, may have made, proposes to make or could make a protected disclosure.  The offence is punishable by imprisonment of up to 2 years, a fine of 120 penalty units or both. 

Fact Sheet

For further information on whistleblower reprisals, see our fact sheet - penalties for taking a reprisal against a whistleblower (PDF 203.8KB).


The presentation slides below provide a general overview of the whistleblower scheme.

Presentation slides (PDF 802.9KB) - from ROC information workshop on 6 March 2018 at Parramatta RSL Club, NSW.