In this two-part article, we will delve into the legal treatment of whistleblowing and speaking up in Australia, dissect case studies showcasing the most common pitfalls for both, employers and employees, and discuss what a good, effective and safe compliance framework looks like.
“Whistleblowing” means two different things depending on who you ask. In the narrow, statutory sense used in Australian law, it refers to a specific set of protected disclosures, typically about dangers to the public or the financial system, made through defined legal channels. In the broader sense most people have in mind, it covers something wider: reporting wrongdoing, raising grievances, and voicing concerns in the workplace generally.
The gap between those two definitions matters, because the legal protection available to a worker depends entirely on which kind of disclosure they are making. This article sets out the legal landscape in Australia, the practical limits of that protection and, using three recent, high-profile cases as a guide, what genuinely robust whistleblowing compliance looks like versus what merely looks compliant on paper.
The legal picture in Australia
In the private sector, the formal whistleblowing regime — most notably under the Corporations Act — is largely confined to corporate misconduct reportable to ASIC or APRA, with separate specific legislation covering the aged care sector. These statutes do not extend to ordinary workplace grievances or concerns.
In the public sector, the Commonwealth and State/Territory versions of the Public Interest Disclosure Act protect public servants who make protected disclosures. But there is no equivalent, dedicated, broad workplace whistleblowing statute for private sector workers.
The closest private-sector workers get is the general protections regime under section 340 and surrounding provisions of the Fair Work Act, which protects employees from adverse action taken because they have exercised a protected workplace right — including the right to make a complaint in relation to their employment.
Examples of protected workplace rights
- Raising a WHS concern, such as reporting unsafe conditions or practices.
- Making a complaint about pay or conditions, such as reporting underpayment to the Fair Work Ombudsman.
- Complaining about discrimination or harassment through internal or external channels.
What counts as adverse action
- Dismissal.
- Injuring an employee in their employment — for example, denying a promotion.
- Altering an employee’s position to their prejudice — demotion, reduced hours, stripped responsibilities.
- Threatening to do any of the above.
The limits of general protections
- The complaint must relate to the worker’s own employment: reporting a colleague’s misconduct or broader organisational wrongdoing that isn’t connected to the reporting worker’s own employment is not protected.
- Personal grievances, such as a dispute over a salary decision or promotion, are generally unprotected unless they involve a broader legal breach.
- Strict time limits apply: 21 days to file with the Fair Work Commission if dismissal has occurred, or six years for other types of adverse action.
What protection does a dismissed worker actually have?
A dismissed worker earning below the high income threshold (currently at $183,100 per annum) can bring proceedings under unfair dismissal or general protections (or, in some cases, for breach of contract). The two pathways differ significantly, and the choice matters:
| General Protections (Adverse Action) | Unfair Dismissal | |
| Basis | Worker suffered adverse action because of a protected reason | Dismissal was harsh, unjust or unreasonable |
| Where heard | Initiated at the Fair Work Commission; litigated in the Federal Court | Fair Work Commission |
| Reinstatement available? | Yes | No |
| Injunction available? | Yes | No |
| Compensation cap | None | Lesser of 26 weeks’ pay or $91,550 |
| Penalties against individuals | Available, including against anyone knowingly concerned | N/A |
| Non-economic loss (distress, humiliation) | Available | N/A |
| Costs follow the event? | Yes — losing party pays winner’s costs | No |
| Income threshold | N/A | Below the Fair Work Act’s high income threshold (currently $183,100 p.a.) |
| Time limit | 21 days (dismissal) / 6 years (non-dismissal) | 21 days from dismissal |
Critically, the onus of proof is reversed in general protections claims: it is presumed that the employer’s action was taken because the worker exercised a protected workplace right, and it falls to the employer to prove, on the balance of probabilities, that the protected reason was not a reason for the action.
Work health and safety legislation
Every state and territory WHS Act independently protects workers who raise safety concerns, including psychosocial hazards. Reporting an unsafe workplace to a regulator such as WorkSafe or SafeWork is protected conduct, and retaliation against a worker for doing so is a specific offence under those Acts — separate from, and additional to, the general protections in the Fair Work Act.
When compliance fails: TerraCom, Boyle and KPMG
The law on paper is one thing. What happens inside an organisation when a real disclosure lands is another — and three recent cases illustrate just how wide that gap can be.
TerraCom: the first ASIC enforcement action
In August 2025, ASIC secured its first enforcement outcome under the Corporations Act whistleblower provisions, against ASX-listed coal miner TerraCom. The case concerned a former TerraCom employee who disclosed that the company had falsified its coal quality results.
The Federal Court held that TerraCom had contravened the victimisation prohibition in section 1317AC of the Corporations Act, causing the employee “hurt, humiliation, distress and embarrassment, and damage to reputation” through the tone and content of market announcements the company made following his disclosure and the termination of his employment.
TerraCom was ordered to pay a $7.5 million penalty. Notably, the Court took into account that TerraCom did have a whistleblower policy compliant with section 1317AI, and had engaged legal advisers to review it and prepare training — yet this did not prevent the contravention.
Boyle: when the whistleblower becomes the defendant
Boyle, a former Australian Taxation Office employee, disclosed what he asserted were aggressive and unethical debt recovery tactics by the ATO. To build up his case, Boyle secretly gathered supporting photographs and audio recordings at his workplace.
The court found that much of Boyle’s substantive complaint was credible, but he was separately prosecuted for the covert recordings. In August 2025 he pleaded guilty to four criminal charges after the Commonwealth Director of Public Prosecutions dropped 23 others, reducing Boyle’s potential exposure from a maximum of 161 years to a 12-month good behaviour bond.
The lesson for prospective whistleblowers is sobering: being right about the underlying wrongdoing does not immunise the method of disclosure.
Anyone considering gathering evidence outside sanctioned channels needs to understand the applicable confidentiality, privacy and protected-information laws before acting – and ideally seek legal advice before proceeding to avoid inadvertently triggering adverse legal consequences for themselves.
TerraCom and KPMG: passing the structural test, failing the cultural one
The recent KPMG whistleblower matter — which attracted significant parliamentary and media attention — is the clearest illustration yet that a policy meeting the letter of the law is not the same as a program that works. As in TerraCom, KPMG’s internal channel funnelled the complaint to people with an institutional interest in the outcome, the whistleblower’s identity was not adequately protected, and the parliamentary hearing revealed that confidentiality can be breached even by people who believe they are acting responsibly.
Employers should not be lulled into a false sense of security that ticking the legal boxes discharges their obligations. As these cases show, a policy that exists but is not adequately implemented can be worse than no policy at all: it creates the illusion of compliance while delivering none of the substance.
More information: whistleblowing webinar
Praetorium Law’s Fito Pando Molina was kindly invited by Diligent to speak at the webinar “7 Vital Traits of a Trusted, Defensible Whistleblowing Program” on 22 July 2026.
To hear more insights on this topic visit: https://learn.diligent.com/Trusted_Whistleblowing_Program.html
Need legal advice on this topic?
Praetorium Law advises employers and employees on this and all other aspects of Employment Law. Contact us at info@praetoriumlaw.com to discuss how we can help.
© Praetorium Law 2026. This article is intended as general information only and does not constitute legal advice. Contact us for specific legal advice for your circumstances.