What are the latest regulatory updates for whistleblowing compliance?

The whistleblowing regulatory landscape continues evolving rapidly across multiple jurisdictions, with significant developments during 2024-2025 affecting organisations’ compliance obligations.

Understanding these updates helps compliance officers anticipate requirements, assess current arrangements against emerging standards, and prepare for implementation timelines.

Recent changes span UK legislative reforms, EU Member State enforcement intensification, international standard updates, and sector-specific regulatory guidance. Organisations operating across multiple jurisdictions face particular complexity navigating these overlapping developments whilst maintaining consistent governance standards.

For comprehensive background on existing requirements, see our EU Whistleblowing Directive Compliance Hub.

UK Legislative Developments

What are the latest regulatory updates for whistleblowing compliance?

The whistleblowing regulatory landscape has evolved significantly during 2024-2026, with major developments affecting organisations’ compliance obligations across UK, EU, and international jurisdictions. Understanding these updates helps compliance officers anticipate requirements, assess current arrangements, and prepare for implementation timelines. This article examines the most significant recent changes, focusing on those with immediate or near-term compliance implications for organisations operating in Europe.

For comprehensive background on existing requirements, see our EU Whistleblowing Directive Compliance Hub and what are the legal obligations for whistleblowing in the UK.

Employment Rights Act 2025

The Employment Rights Act 2025 received Royal Assent on 18 December 2025, introducing significant whistleblowing-related changes with phased implementation during 2026-2027.

Sexual harassment as qualifying disclosure (6 April 2026): Disclosures about sexual harassment will explicitly qualify as protected disclosures under whistleblowing legislation. This removes any uncertainty and provides workers reporting sexual harassment with full whistleblowing protections including protection from detriment, unfair dismissal claims from day one, and interim relief applications.

Enhanced harassment prevention duties (October 2026): Employers must take “all reasonable steps” (not merely “reasonable steps”) to prevent sexual harassment. This heightened standard increases expectations around risk assessments, policies, training, and complaint handling procedures.

NDA restrictions: Contractual provisions preventing workers from making allegations or disclosures about work-related harassment or discrimination will be void. Implementation date not yet confirmed but expected during 2026.

These changes create enhanced whistleblowing obligations. Organisations should review arrangements ensuring channels accommodate sexual harassment reports, training addresses harassment reporting, and procedures integrate whistleblowing with harassment investigation processes.

Office of the Whistleblower Bill

The Office of the Whistleblower Bill, introduced by Labour MP Gareth Snell in December 2024, had its second reading on 11 July 2025 during Whistleblowing Awareness Week. The Bill proposes establishing an independent statutory body to oversee UK whistleblowing, with powers to set mandatory standards, receive and investigate disclosures, issue enforcement notices, and impose penalties up to 10% of individual income (£50,000 cap) or 10% of company global turnover.

As a Private Member’s Bill, progress depends on government support. Whilst previous reform attempts have stalled, the current Labour government has indicated commitment to strengthening whistleblower protections. Organisations should monitor parliamentary progress and begin considering implications for their arrangements.

atest

The “failure to prevent fraud” offence under ECCTA came into force on 1 September 2025, creating corporate criminal liability when employees or agents commit fraud for organisational benefit unless reasonable fraud prevention procedures exist. Home Office guidance explicitly identifies whistleblowing mechanisms as essential fraud prevention infrastructure. How can whistleblowing hotlines support anti-fraud initiatives? examines compliance implications.

EU Implementation Progress

Complete Member State Transposition

As of July 2025, all 27 EU Member States have now transposed the EU Whistleblowing Directive into national law. However, the European Commission has not yet confirmed that all national laws fully comply with the Directive’s standards, creating ongoing legal uncertainty in some jurisdictions. The Commission’s evaluation of implementation quality continues during 2025-2026.

Court Action for Delays

The Court of Justice of the European Union (CJEU) has issued a fine to five Member States of over €38 million for transposition delays. This action is ongoing but demonstrates increased enforcement seriousness. Further infringement proceedings against Member States with inadequate transposition are anticipated.

Spain’s Independent Authority

Spain’s Independent Authority for Whistleblower Protection commenced operations on 1 September 2025, creating new external reporting obligations for Spanish entities. Organisations operating in Spain must register their internal whistleblowing systems with this Authority. The deadline for registration came two months after the Authority’s launch.

EU AI Act Whistleblowing Coverage

From 2 August 2026, the EU AI Act explicitly falls within EU Whistleblowing Directive protection scope. Workers can report AI Act violations through protected channels, with full retaliation protection. This extends Directive coverage into technology governance, with implications for organisations developing or deploying AI systems.

Financial Services Regulatory Updates

FCA Heightened Scrutiny

Following the House of Commons Treasury Committee inquiry finding that “whistleblowing processes within financial services firms are often ineffective,” the Financial Conduct Authority has increased scrutiny of firms’ whistleblowing arrangements. Firms should expect increased regulatory focus on:

Whether arrangements genuinely protect those reporting harassment
Quality of investigation procedures
How firms handle retaliation allegations
Effectiveness of Whistleblowers’ Champions

What are the compliance requirements for whistleblowing in financial services? addresses sector-specific obligations.

FCA Code of Conduct Update

A new COCON rule defining non-financial misconduct is expected September 2026, broader than Equality Act protections as it extends beyond protected characteristics. This will increase expectations around reporting mechanisms for all types of workplace misconduct.

International Developments

Japan’s 2025 Amendment

Japan passed the 2025 Amendment to the Whistleblower Protection Act, strengthening protections for whistleblowers and enhancing corporate obligations. Whilst primarily affecting organisations operating in Japan, this reflects global trend toward enhanced whistleblower protection.

Practical Implications

These regulatory updates create several compliance challenges:

Multiple Overlapping Timelines

Organisations face staggered implementation across different requirements:

September 2025: ECCTA failure to prevent fraud
April 2026: Employment Rights Act sexual harassment provisions
October 2026: Enhanced harassment prevention duties
August 2026: EU AI Act whistleblowing coverage
Ongoing: Member State-specific EU Directive variations

Expanding Protected Disclosures

Sexual harassment joining whistleblowing protected disclosures (April 2026) requires organisations to:

Update policies and training reflecting expanded scope
Ensure reporting channels accommodate harassment concerns
Integrate harassment investigation with whistleblowing procedures
Review NDAs ensuring no restrictions on harassment disclosure

Heightened Penalties

Enhanced penalties across multiple frameworks increase non-compliance stakes. Combined exposure from ECCTA fraud offences, Employment Tribunal compensation uplifts for harassment failures, EU Directive Member State penalties, and potential Office of the Whistleblower regime creates substantial financial risk.

Investigation Obligations

The trend toward mandatory investigation duties (proposed in Office of the Whistleblower Bill, Employment Rights Act provisions) moves beyond reactive protection toward proactive obligations ensuring concerns are addressed appropriately. Organisations require investigation capability meeting these emerging standards.

How Safecall Helps Navigate Updates

With 25 years’ experience supporting organisations through evolving regulatory requirements, Safecall helps compliance officers manage change through:

Regulatory monitoring: Tracking developments across jurisdictions, providing updates on implementation timelines, and guidance on compliance implications.

Flexible arrangements: Systems accommodating new requirements (expanded protected disclosure categories, enhanced harassment reporting, AI Act coverage) without fundamental restructuring.

Professional expertise: Former UK police officers with 25+ years’ experience handle all telephone reports, ensuring arrangements meet heightened regulatory expectations around investigation quality.

Training updates: Training programmes reflecting latest regulatory changes, ensuring managers and employees understand evolving requirements.

Implementation support: Account management helping organisations navigate transitions, update procedures, and communicate changes to stakeholders.

Next Steps

To stay ahead of regulatory updates:

Monitor legislative progress of Office of the Whistleblower Bill and Employment Rights Act implementation consultations
Prepare for April 2026 changes including sexual harassment as qualifying disclosure
Review ECCTA compliance ensuring fraud prevention procedures include effective whistleblowing
Audit EU entity compliance across all Member States, noting local implementation variations
Assess investigation capability against emerging obligations requiring appropriate response to disclosures

For expert guidance on navigating regulatory updates and ensuring ongoing compliance, contact Safecall on +44 (0) 191 516 7720 or visit our whistleblowing solutions page.