On 12 March 2019, the Commonwealth Government’s new whistleblower regime contained in the Treasury Laws Amendment (Enhancing Whistleblower Protections) Bill 2018 (Whistleblower Bill) received Royal Assent. The new whistleblower regime will commence on 1 July 2019, with significant implications for companies captured by the broadened scope of the legislation across the corporate, financial and credit sectors. The aim of the new consolidated regime is to introduce a greater amount of consistency and cohesiveness, and to fill in the gaps that currently exist. Serious consequences (both civil and criminal) may be imposed on companies found to be in breach.
There are steps that certain organisations must take to ensure compliance with the new provisions and avoid penalties.
First, public and large proprietary companies must have a compliant whistleblower policy available to all officers and employees that sets out information including, but not limited to, the protections available to whistleblowers, how the company will support and protect whistleblowers, how the company will investigate disclosures and how the company will ensure fair treatment of employees who make disclosures.
Second, these organisations must develop a stringent framework that governs the investigative process, provide adequate training to officers as well as all employees and maintain an appropriate oversight mechanism to ensure that the investigative process framework and the whistleblower policy are being followed.
Implementing appropriate measures will minimise the likelihood of any inadvertent contraventions.
The new regime will be extended to protect a broader class of people and apply to an expanded range of entities, referred to as ‘regulated entities’. Key terms of the Bill are defined below:
In certain circumstances, a ‘public interest disclosure’ or ‘emergency disclosure’ may be made to a Commonwealth, State or Territory member of Parliament or to a journalist.
There will be new civil penalty provisions and criminal offences for contraventions which impose significantly harsher maximum penalties.
Civil penalty contraventions
Type of contravention |
Maximum penalty |
Breach of confidentiality of whistleblower's identity Victimisation of whistleblower |
Individuals: $1,050,000; Corporations: $10,500,000; or three times the benefit derived or detriment avoided; or 10% of the body corporate's annual turnover (up to $210,000,000) |
Criminal offences
Type of contravention |
Maximum penalty |
Breach of confidentiality of whistleblower's identity |
$12,600 or imprisonment for six months or both |
Victimisation of whistleblower |
$50,400 or imprisonment for two years or both |
Lack of compliant whistleblower policy |
$12,600 |
If you are unsure how the new whistleblowing regime applies to your company, or you need help in developing a whistleblowing policy, please contact Automic Group.