Someone in your team sends an email saying they think the way you are recording driver hours is not right, and that they have raised it twice. It reads like a complaint about paperwork. Four weeks later they are gone, for reasons that felt entirely separate at the time, and a tribunal claim arrives that is not an ordinary unfair dismissal claim at all.

Whistleblowing is the corner of employment law that catches small employers hardest, for two structural reasons. There is no minimum length of service, so a person who started on Monday has the same protection as a fifteen-year veteran. And compensation is uncapped, unlike the compensatory award in an ordinary unfair dismissal case. Every other instinct you have built up about employment risk — that new starters are lower risk, that the exposure has a ceiling — is wrong here.

What actually counts as a protected disclosure

The framework sits in Part IVA of the Employment Rights Act 1996, inserted by the Public Interest Disclosure Act 1998. For a worker to be protected, three things have to line up.

It has to be a disclosure of information, not a bare allegation or an expression of unhappiness. The distinction is finer than it sounds, and the courts have made clear that an allegation can carry information inside it — but a general complaint that things are badly run does not qualify, whereas naming what is happening, roughly when, and to whom does.

The worker has to reasonably believe the information tends to show one of six things: a criminal offence, a failure to comply with a legal obligation, a miscarriage of justice, a danger to health and safety, damage to the environment, or the deliberate concealment of any of those. Reasonable belief is the test, not truth. A worker who is honestly and reasonably wrong is still protected.

And since 2013 the worker must reasonably believe the disclosure is in the public interest. That was intended to stop people dressing up a private contractual dispute as whistleblowing, and it does some of that work — but the bar is lower than employers hope. A concern affecting a group of colleagues, or customers, or the public, generally clears it.

There is no magic word. Nobody has to say the phrase whistleblowing, put it in writing, or use your grievance form for the protection to apply.

Two claims, and why your size is irrelevant

Section 47B gives a worker the right not to be subjected to any detriment because they made a protected disclosure — being sidelined, taken off good work, excluded, refused a reference, or treated coldly enough that it counts. Compensation there can include an award for injury to feelings. Section 47B also makes you liable for detriment inflicted by one worker on another unless you took all reasonable steps to prevent it, which is why the manager who quietly freezes someone out becomes your problem.

Section 103A makes dismissal automatically unfair where the reason, or the principal reason, is the protected disclosure. No qualifying service. No cap.

None of this scales with headcount. A firm of six carries the same exposure per employee as a firm of six hundred, and has none of the HR infrastructure that would normally catch the problem early.

An illustrative sequence, and what it costs

Take a nine-person logistics firm. A driver on £34,000 emails the owner about hours being logged incorrectly, copying the transport manager. Nothing formal happens. Over the next six weeks he is moved off the regular contract run onto ad-hoc work, which cuts his overtime. He raises it again. In week ten he is dismissed, ostensibly for a vehicle damage incident that two other drivers had previously had no action taken over.

The figures, illustratively. Gross salary £34,000, or £2,833 a month. It takes fourteen months to find comparable work, giving lost earnings of about £39,662. Employer pension contributions at 3% add roughly £1,190. There is an award for injury to feelings on the detriment claim on top of that, plus the firm's own legal costs of defending a multi-day hearing. The exposure passes £45,000 comfortably, and none of it is capped.

The damaging detail is the inconsistency: two other drivers, same conduct, no action. That is the fact pattern that persuades a tribunal the stated reason was not the real one. What actually happens when an employment tribunal claim lands sets out the process from the first ACAS letter onwards.

What to do in the first 48 hours

Acknowledge it in writing and thank them. That sounds like empty politeness; it is actually the single most protective thing on the list, because it creates a record of an employer treating a concern seriously rather than defensively.

Separate the concern from the person. Investigate what was raised on its own merits, and if there are performance or conduct issues with the person who raised it, they now need a visibly higher standard of process, not a quieter one. Do not pause a legitimate process out of fear, and do not accelerate one out of irritation.

Put someone other than the person named in the disclosure in charge of looking at it. Write down what you found and what you changed. Tell the worker the outcome, even where the answer is that you looked and there was nothing in it.

And watch the small things for the next six months. Most whistleblowing claims are not built on a dramatic dismissal; they are built on a rota change, a withdrawn training course and a manager who stopped saying good morning. If a genuine conduct issue does arise later, run it exactly as you would for anyone else — how to give an employee a written warning properly and suspending an employee are the two processes most often rushed in exactly this situation.

The policy, and the clause that does not work

A small employer outside the regulated sectors is not legally required to have a whistleblowing policy. Having one is still worth the hour it takes, for a practical reason: it gives concerns somewhere to land other than the manager they are about, and it gives you evidence that you invited them.

Keep it short. Name two people a concern can go to, one of whom is not the operational manager. Say concerns can be raised verbally. Say you will acknowledge within a set number of days and report back. Say nobody will be disadvantaged for raising something in good faith, and mean it.

One thing you cannot do: section 43J of the Employment Rights Act makes void any contractual term that purports to stop a worker making a protected disclosure. That includes confidentiality clauses in settlement agreements. You can agree confidentiality about the terms of a settlement; you cannot buy silence about a protected disclosure, and a clause that tries to do so is unenforceable and reads terribly if it ever surfaces.

Workers can also go straight to a prescribed person — HMRC, the Health and Safety Executive, the FCA and a long list of others — without telling you first. Where that concerns safety in your own workplace, what a small employer must actually do on health and safety is the groundwork that stops the visit being a bad day.

Common questions

Does a whistleblowing complaint have to be in writing?

No. A protected disclosure can be made verbally, in a corridor, in a team meeting or in a passing comment to a supervisor, and the worker never has to use the word whistleblowing or invoke a policy. That is precisely why so many employers only realise a disclosure was made when the tribunal claim explains it to them. The practical response is to treat any concern about legality, safety or wrongdoing as potentially protected from the moment you hear it, write down that you heard it and what you did next, and avoid the instinct to reclassify it as a grievance about something else. The record you make contemporaneously is what protects you later.

Can a settlement agreement stop someone raising it again?

Not as far as the disclosure itself is concerned. Section 43J of the Employment Rights Act 1996 makes void any provision in an agreement that purports to prevent a worker making a protected disclosure, and that expressly includes settlement agreements. You can lawfully agree that the existence and financial terms of a settlement stay confidential, and that is standard. You cannot prevent the person telling a regulator, a prescribed person or the police about the underlying concern. Drafting a clause that tries to is worse than useless: it is unenforceable, and if it ever comes before a tribunal it colours everything else the employer says about acting in good faith.

Does my nine-person business need a whistleblowing policy?

There is no general legal requirement for a small employer outside the regulated financial sectors to have one, so the honest answer is that you can operate without it. The reason to write one anyway is practical rather than legal. A policy gives a concern a route that does not run through the manager it is about, which is the single commonest reason small-firm concerns escalate straight to a regulator instead. It also evidences that you invited concerns rather than discouraged them, which matters if a claim is ever brought. One page naming two contacts, a response time and a no-detriment promise is enough.

Can staff report us to HMRC or the HSE without telling us first?

Yes. The legislation sets out a list of prescribed persons — including HMRC, the Health and Safety Executive, the Financial Conduct Authority, the Environment Agency and many sector regulators — and a disclosure made to the right prescribed person is protected without any obligation to raise it internally first. In practice most workers do come to their employer first, and an employer who deals with a concern properly usually never reaches the regulator stage. Where a disclosure does go externally, retaliating against the worker afterwards converts a resolvable regulatory matter into an uncapped tribunal claim on top of it.