Which law provides legal protection for those who report corporate misconduct?

The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from retaliatory action for voluntarily disclosing information about dishonest or illegal activities occurring in a government organization.

This law, sometimes called the WPA, also prohibits a federal agency from taking action or threatening to take action against an employee or applicant for disclosing information that he or she believes violated a law, compliance rule or another regulation. The disclosed information could include reports of management wrongdoing, the waste of funds, an abuse of authority, and a potential risk to public health or safety.

The U.S. Office of Special Counsel has jurisdiction over allegations of federal whistleblower retaliation and investigates federal whistleblower complaints.

Who qualifies as a whistleblower?

A whistleblower is anyone who uncovers activities that could be illegal, unethical or inappropriate and then reports that activity to authorities or otherwise makes the activities known -- i.e., reporting the wrongdoing to a news outlet.

A whistleblower can be someone working in or with the public sector at the local, state or federal government level.

A whistleblower may also be someone working in or with private, for-profit companies, as well as nonprofit entities.

Many states have whistleblower laws, and those laws generally offer protections for whistleblowers in state and local government, as well as those working in the private sector. However, the WPA specifically applies to whistleblowers within the federal government.

History of whistleblower laws

The United States has a history of protecting whistleblowers, with some citing a 1778 law passed by the Continental Congress during the American Revolutionary War as the first federal law protecting whistleblowers. Congress passed the law in response to a 1777 case in which 10 sailors filed a petition stating that their politically connected Continental Navy commodore tortured British prisoners.

Other federal laws through the centuries have also offered some level of protection, with some pointing to the First Amendment right of free speech as offering protection for whistleblowers, too.

More recently, the Civil Service Reform Act of 1978 codified some whistleblower rights and protections that governed whistleblower cases filed by federal employees for a decade before the passage of the WPA.

However, the lawmakers that passed the WPA in 1989 did so specifically to better protect federal employees, stating in the text of the law that "The purpose of this Act is to strengthen and improve protection for the rights of Federal employees, to prevent reprisals, and to help eliminate wrongdoing within the Government."

The 1989 law took several steps to strengthen protections for federal employees, including clarifying the procedure that employees should use to report suspected wrongdoing and avoid retaliation.

How the WPA works

The WPA covers current and former federal employees, as well as applicants for federal government jobs.

According to the act, a federal employee can report misconduct to the Office of the Special Counsel (OSC). The act considers misconduct to include:

  • a violation of a law, rule or regulation;
  • gross mismanagement;
  • gross waste of funds;
  • abuse of authority; and
  • a substantial and specific danger to public health or safety.

The OSC does not investigate the claims itself; rather, they review the claim to determine the likelihood of wrongdoing -- which the act establishes as having reliable, firsthand knowledge of the misconduct.

If the OSC determines there's a likelihood of wrongdoing, it refers the claim to the appropriate regulatory or governing agency for further investigation. The agency leading the investigation must investigate the claim and report back to the OSC within 60 days.

The act states that an employee who makes disclosures as a whistleblower and then is subject to retaliatory actions can report the suspected acts of reprisal to the OSC, which would further investigate the charge.

Whistleblowing consequences

An expert divulges how leaks can benefit enterprise security

It's important to note that the WPA does not cover all federal workers, nor does it allow the OSC to handle all claims. For example, the OSC would not handle claims for employees of federal contractors or military members. Moreover, employees of federal intelligence agencies such as the CIA and FBI do not have the same processes and protections that the WPA provides for other federal workers.

Additional whistleblower protections

In 2012, Congress passed the Whistleblower Protection Enhancement Act of 2012 to substantially strengthen protections for federal whistleblowers. Those additional protections included:

  • clarifying the scope of protected disclosures;
  • creating enhanced remedies for workers who have been subjected to retaliatory actions; and
  • requiring agencies to educate employees about their rights.

In addition, other laws passed in the 2000s, such as the Dodd-Frank Wall Street Reform and Consumer Protection Act, the Sarbanes-Oxley Act, and the Department of Veterans Affairs Accountability and Whistleblower Protection Act, offer protections for workers who act as whistleblowers.

This was last updated in July 2018

Continue Reading About Whistleblower Protection Act

  • Sarbanes-Oxley Act's update affects whistleblowers
  • Internal whistleblowers protected by government act
  • Whistleblower Edward Snowden discusses the value of encryption

Dig Deeper on Risk management and governance

  • Which law provides legal protection for those who report corporate misconduct?
    Wireless security: WEP, WPA, WPA2 and WPA3 differences

    Which law provides legal protection for those who report corporate misconduct?

    By: Alissa Irei

  • Which law provides legal protection for those who report corporate misconduct?
    Wi-Fi Protected Access (WPA)

    Which law provides legal protection for those who report corporate misconduct?

    By: Alexander Gillis

  • Which law provides legal protection for those who report corporate misconduct?
    Twitter whistleblower report holds security lessons

    Which law provides legal protection for those who report corporate misconduct?

    By: Shaun Nichols

  • Which law provides legal protection for those who report corporate misconduct?
    Risk & Repeat: Whistleblower spells trouble for Twitter

    Which law provides legal protection for those who report corporate misconduct?

    By: Alexander Culafi

What are the corporate code of ethics?

to set standards of ethical behaviour that define relationships within the Company's team, with customers, business partners, government bodies, the public and competitors; to serve as a tool to prevent possible violations and conflict situations, and to develop a corporate culture based on high ethical standards.

What does a company's code of ethics cover?

A code of ethics document may outline the mission and values of the business or organization, how professionals are supposed to approach problems, the ethical principles based on the organization's core values, and the standards to which the professional is held.

Is an employee's disclosure of illegal or unethical conduct by others within the organization?

A whistleblower is an employee of a corporation or government organization that informs the public or higher authority of any wrongdoing, such as fraud, illegal activity, or unethical behavior, among other things.

What are two ways that a company's ethics officer can help to enforce the company's ethics code?

observing employees, conducting internal audits and investigations, circulating surveys, and instituting reporting systems are ways a company can assess compliance with its ethical code and standards.