Whistleblowing Policy
Template — South Africa
An attorney-drafted Whistleblowing (Protected Disclosures) Policy template designed specifically for South African organisations. This comprehensive, legally compliant document enables employees and stakeholders to report fraud, corruption, and misconduct without fear of retaliation — covering the Protected Disclosures Act 26 of 2000 (amended 2017), Companies Act section 159 protections, PRECCA section 34 reporting duties, anonymous and confidential reporting channels, investigation procedures, and comprehensive anti-retaliation provisions.
Drafted by qualified South African attorneys
Reviewed for compliance with current legislation · Last updated April 2026
Why Your Business Needs This Agreement
Fraud and Corruption Undetected Due to Absent Reporting Channels
The Association of Certified Fraud Examiners (ACFE) consistently reports that tips are the most common method for detecting occupational fraud — accounting for over 40% of all fraud discoveries globally. Organisations without accessible, trustworthy whistleblowing channels miss these tips, allowing fraud and corruption to continue undetected for years. The median duration of fraud before detection in organisations without hotlines is twice that of organisations with hotlines. The cumulative financial loss from undetected fraud can be catastrophic.
Automatic Unfair Dismissal Awards for Whistleblower Retaliation
Employers who retaliate against whistleblowers face automatically unfair dismissal claims under LRA section 187(1)(h), carrying compensation of up to 24 months' remuneration — double the ordinary unfair dismissal cap. Even occupational detriment short of dismissal can result in Labour Court orders requiring remediation and interdicts preventing further retaliation. Without a Whistleblowing Policy establishing clear anti-retaliation protections and training for managers, organisations expose themselves to these enhanced legal consequences.
Criminal Prosecution for PRECCA Section 34 Reporting Failures
Directors and senior managers who become aware of corruption involving R100,000 or more and fail to report it to the SAPS face criminal prosecution under PRECCA section 34, with imprisonment of up to 10 years. Without a Whistleblowing Policy establishing internal escalation procedures that trigger the section 34 duty, directors may fail to report — not from intent to conceal, but from organisational confusion about when and how to fulfil the duty. The absence of a policy is no defence to a section 34 prosecution.
Damaging External Disclosures to Media Due to Internal Channel Failures
When employees do not trust internal reporting channels — or when no channels exist — they are more likely to make external disclosures to the media under PDA section 9. External media disclosures cause severe reputational damage that internal resolution would have avoided. The PDA's tiered framework is designed to incentivise internal reporting, but this only works if the organisation has accessible, credible internal channels. A Whistleblowing Policy with an independent external hotline creates the trusted internal mechanism that reduces external disclosure risk.
King IV Governance Non-Compliance
King IV Principle 2 explicitly recommends whistleblowing mechanisms as part of the ethics governance framework. For listed companies, state-owned enterprises, and organisations that apply King IV (which includes most significant South African businesses), the absence of a Whistleblowing Policy represents a governance failure. Institutional investors, rating agencies, and governance assessors increasingly scrutinise the existence and effectiveness of whistleblowing programmes as an indicator of ethical governance maturity.
What is a Whistleblowing Policy?
South Africa's Protected Disclosures Act 26 of 2000 (PDA), as substantially amended in 2017, provides the legal framework for whistleblower protection — shielding employees who disclose information about unlawful or irregular conduct in the workplace from occupational detriment. The 2017 amendments significantly expanded the Act's reach: the definition of "employee" was broadened to include workers, independent contractors, consultants, and agents; the definition of "occupational detriment" was expanded to cover a wider range of retaliatory actions; and the remedies available through the Labour Court were enhanced, including compensation of up to 24 months' remuneration for unfair dismissal.
The importance of a formal Whistleblowing Policy cannot be overstated in the South African context. The country's corporate governance framework — anchored by the King IV Report on Corporate Governance — explicitly recommends that organisations establish ethical cultures supported by accessible reporting mechanisms and robust whistleblower protection. The Companies Act 71 of 2008 reinforces this through section 159, which provides additional protections for persons who make disclosures about company affairs to the CIPC, the Companies Tribunal, or other regulatory bodies. The Prevention and Combating of Corrupt Activities Act 12 of 2004 (PRECCA) adds a mandatory dimension through section 34, which requires persons in positions of authority to report corrupt transactions involving R100,000 or more to the South African Police Service — failure to report is a criminal offence carrying imprisonment of up to 10 years.
The PDA establishes a tiered disclosure framework that encourages internal reporting as the first step. Section 6 protects disclosures made to the employer. Section 5 protects disclosures to legal advisers. Section 7 protects disclosures to certain prescribed bodies including the Public Protector, the Auditor-General, and other regulatory authorities. Section 9 protects disclosures to external parties (including the media) only in limited circumstances — where the whistleblower reasonably believes they will be subjected to occupational detriment for internal reporting, where evidence may be destroyed, or where the matter is of an exceptionally serious nature. This tiered approach incentivises organisations to establish effective internal reporting mechanisms — the more accessible and trustworthy the internal channels, the less likely employees are to make damaging external disclosures.
This attorney-drafted Whistleblowing Policy template creates a comprehensive framework covering multiple confidential and anonymous reporting channels (including an independent ethics hotline), clear definitions of reportable conduct, investigation procedures with defined timelines and responsibilities, robust anti-retaliation protections aligned with the PDA, confidentiality and anonymity safeguards, external disclosure guidance, record-keeping and board reporting requirements, and integration with the organisation's Anti-Bribery Policy and Code of Conduct.
Who Needs This
Want early access to the Whistleblowing Policy template?
We'll email you the moment early access opens
The PDA (amended 2017) protects whistleblowers from all forms of occupational detriment — dismissal for whistleblowing is automatically unfair under LRA section 187(1)(h) with compensation up to 24 months' remuneration
PRECCA section 34 requires directors and managers to report corrupt transactions involving R100,000+ to the SAPS — failure to report carries imprisonment up to 10 years
Tips are the most common method for detecting occupational fraud (40%+ of all detections) — organisations without whistleblowing hotlines take twice as long to detect fraud
The 2017 PDA amendments expanded protections to workers, independent contractors, and consultants — not just traditional employees
King IV Principle 2 explicitly recommends whistleblowing mechanisms as a core component of ethical governance — absence indicates governance failure
Key Clauses Included
This Whistleblowing Policy template covers 11 essential sections, each drafted by South African attorneys.
Policy Statement, Scope & Ethical Commitment
Board-endorsed commitment to an ethical workplace culture where employees feel safe to report concerns without fear of retaliation. Definition of protected disclosures under the PDA. Scope covering employees, workers, independent contractors, consultants, temporary staff, former employees (for matters arising during their employment), and in certain circumstances, suppliers and clients. The distinction between whistleblowing (reporting of serious impropriety) and grievances (personal workplace complaints).
Reportable Conduct — What Can Be Disclosed
Comprehensive categories of reportable conduct: criminal offences (fraud, theft, corruption, bribery, money laundering), failure to comply with a legal obligation (tax evasion, regulatory non-compliance, environmental violations), miscarriages of justice, endangerment of health or safety, damage to the environment, unfair discrimination, financial mismanagement or irregularities, conflicts of interest, abuse of authority, cover-ups of any of the above, and any other conduct that the whistleblower reasonably believes constitutes an irregularity.
Internal Reporting Channels
Multiple internal mechanisms designed to be accessible, confidential, and trustworthy: (1) direct disclosure to the line manager, (2) disclosure to the HR department, (3) disclosure to the designated Ethics Officer or compliance function, (4) an independent external ethics hotline operated by a third-party provider (available 24/7, telephone and online, with multilingual support), (5) an anonymous online reporting portal. The hotline and portal must be operated independently of management to ensure credibility and confidentiality.
External Reporting — When & How
Guidance on the PDA's tiered external disclosure framework: section 5 (disclosure to a legal adviser — always protected), section 7 (disclosure to prescribed bodies including the Public Protector, Auditor-General, SAPS, Information Regulator, CIPC, and sector-specific regulators — protected where made in good faith and the whistleblower reasonably believes the information is substantially true), section 9 (general protected disclosure to external parties including the media — protected only in limited circumstances including reasonable belief of retaliation, evidence destruction, or exceptional seriousness). The policy encourages internal reporting first but acknowledges the legal right to external disclosure.
Investigation Procedures & Timelines
Step-by-step investigation process: receipt and acknowledgement of the report within 48 hours, preliminary assessment by the Ethics Officer to determine jurisdiction and priority, appointment of an impartial investigator (internal or external depending on the severity and seniority of the implicated persons), terms of reference for the investigation, evidence gathering, witness interviews with confidentiality protections, interim measures where necessary (e.g., precautionary suspension of implicated persons), completion of the investigation within 60 calendar days, findings and recommendations report, and feedback to the whistleblower (to the extent possible without compromising the investigation or the rights of implicated persons).
Anti-Retaliation Protections
Comprehensive protections aligned with section 3 of the PDA: prohibition on dismissal, suspension, demotion, transfer, refusal of promotion, harassment, intimidation, disciplinary action, threats, withholding of benefits, or any other occupational detriment against any person who makes or is believed to have made a protected disclosure. Employees who suffer retaliation may approach the Labour Court for relief including reinstatement, compensation of up to 24 months' remuneration, and a restraining order. The policy commits to treating retaliation as a serious disciplinary offence warranting dismissal of the retaliator.
Confidentiality, Anonymity & Information Security
Measures to protect the identity of whistleblowers: the default position is confidential reporting (the identity is known to the Ethics Officer but protected from general disclosure), with anonymous reporting available through the hotline and portal. Information security measures for whistleblowing records — encrypted storage, restricted access, separate from general HR records. The limitations on confidentiality where legal proceedings require disclosure and the process for informing the whistleblower if their identity may need to be disclosed.
PRECCA Section 34 Mandatory Reporting
Specific procedures for complying with the PRECCA section 34 mandatory reporting duty: when the investigation reveals corrupt transactions involving R100,000 or more, persons in positions of authority (directors, senior managers, the compliance officer) must report to the SAPS. Internal escalation procedures to ensure the section 34 duty is triggered. The timeframe for reporting. Documentation of the SAPS report. The criminal consequences of failure to report (imprisonment up to 10 years). Integration with the Anti-Bribery and Corruption Policy.
Protection Against Malicious or False Reports
Clear statement that the PDA protects disclosures made in good faith and with a reasonable belief that the information is substantially true — it does not protect deliberately false, malicious, or vexatious reports. An employee who makes a demonstrably false report with the intention to harm another person may face disciplinary action. However, the policy emphasises that the vast majority of reports are genuine, that an incorrect report is not a false report (the test is reasonable belief, not proof), and that the fear of being labelled a false accuser must not deter legitimate reporting.
Board Reporting, Trends & Oversight
Requirements for reporting whistleblowing activity to the board or audit committee: quarterly reports on the number and nature of reports received, investigation status and outcomes, trends and patterns, emerging risks identified through reports, and the effectiveness of the whistleblowing programme. Annual review of the policy against PDA amendments, King IV recommendations, and organisational experience. The audit committee's oversight role in ensuring the independence and effectiveness of the whistleblowing function.
Integration with Related Policies & Procedures
Cross-references to the Code of Conduct (defining the ethical standards whose breach is reportable), the Anti-Bribery and Corruption Policy (defining corruption-related reportable conduct and the section 34 duty), the Grievance Procedure (distinguishing personal grievances from protected disclosures), the Sexual Harassment Policy (where harassment is reported through the whistleblowing channel rather than the harassment procedure), and the IT Acceptable Use Policy (for cyber-related disclosures).
South African Law Compliance
Protected Disclosures Act 26 of 2000 (amended 2017)
The primary whistleblower protection statute. Section 3 prohibits occupational detriment against whistleblowers. Section 6 protects disclosures to the employer. Section 7 protects disclosures to prescribed regulatory bodies. Section 9 protects general disclosures in limited circumstances. The 2017 amendments expanded the definition of "employee" to include workers, independent contractors, and consultants; expanded the definition of "occupational detriment"; enhanced Labour Court remedies to include compensation of up to 24 months' remuneration; and strengthened protections against retaliatory litigation.
Companies Act 71 of 2008
Section 159 provides additional protections for persons who disclose information about companies to the CIPC, the Companies Tribunal, the Takeover Regulation Panel, a court, a regulatory authority, or an exchange. The protection applies to shareholders, directors, company secretaries, prescribed officers, registered trade unions, and employees. Section 159 disclosures are made in terms of the Companies Act itself, not the PDA, creating a parallel but complementary protection framework.
Prevention and Combating of Corrupt Activities Act 12 of 2004
Section 34 creates a mandatory reporting duty for persons in positions of authority (directors, managers, partners) who know or suspect corrupt transactions involving R100,000 or more — they must report to the SAPS. Failure to report is a criminal offence carrying imprisonment of up to 10 years. The whistleblowing policy integrates with the PRECCA reporting duty, establishing procedures for internal escalation and external reporting when investigation findings trigger the section 34 obligation.
King IV Report on Corporate Governance for South Africa, 2016
Principle 2 recommends that the governing body should govern the ethics of the organisation in a way that supports the establishment of an ethical culture. The King IV application register specifically recommends: the establishment of an ethics management framework, the provision of a safe mechanism for stakeholders to report unethical conduct (whistleblowing), and the protection of whistleblowers from retaliation. The whistleblowing policy is a core component of the King IV ethics governance framework.
Labour Relations Act 66 of 1995
Section 187(1)(h) renders a dismissal automatically unfair if the reason for the dismissal is that the employee made a protected disclosure in terms of the PDA. Automatically unfair dismissal carries compensation of up to 24 months' remuneration (double the ordinary unfair dismissal cap of 12 months). Section 186(2) defines unfair labour practices, which includes subjecting an employee to detriment for making a protected disclosure. The LRA provides the enforcement mechanism for PDA protections in the employment context.
South African businesses are lining up for My-Contracts — be first in when we launch
Create Your Whistleblowing Policy in Minutes
Our guided wizard walks you through every clause — no legal knowledge required. Attorney-drafted, South African law compliant.
Appoint an Ethics Officer and procure an independent hotline
Designate a senior, independent Ethics Officer (or compliance function) to manage the whistleblowing programme. Procure an independent external ethics hotline operated by a reputable third-party provider — the hotline must be available 24/7, support multiple languages, and offer both telephone and online reporting options. The independence of the hotline from management is critical for credibility.
Customise the template for your organisation
Complete the template with your organisation's specific reporting channels, Ethics Officer contact details, investigation procedures, escalation protocols for reports involving senior management, and PRECCA section 34 reporting procedures. Ensure the policy aligns with your existing Code of Conduct and Anti-Bribery Policy.
Communicate the policy and build trust in the programme
Distribute the policy to all employees and stakeholders, display reporting channel details prominently (break rooms, intranet, email signatures), and conduct awareness training emphasising that reporting is protected and encouraged. Build trust through visible management commitment and by demonstrating that reports are taken seriously and investigated promptly.
Train managers on anti-retaliation obligations
Provide specific training to all managers and supervisors on their obligation not to retaliate against whistleblowers, how to respond when an employee raises a concern, the escalation procedures, and the serious disciplinary and legal consequences of retaliation. Managers are the front line of whistleblower protection — or the most common source of retaliation.
Report to the board and review annually
Establish quarterly reporting to the audit committee on whistleblowing activity — number of reports, investigation status, outcomes, trends, and programme effectiveness. Review the policy annually against PDA amendments, King IV developments, and organisational experience. Test the hotline and reporting channels periodically to ensure they function correctly.
Frequently Asked Questions
A protected disclosure is a disclosure of information regarding conduct by an employer or fellow employee that the whistleblower reasonably believes shows: a criminal offence, a failure to comply with a legal obligation, a miscarriage of justice, endangerment of the health or safety of any individual, damage to the environment, or unfair discrimination — or any conduct that constitutes a deliberate concealment of information tending to show any of the above. The disclosure must be made in good faith and substantially in accordance with the PDA's disclosure procedures. The whistleblower does not need to prove that the misconduct actually occurred — a reasonable belief that the information is substantially true is sufficient for protection.
What You Get With This Template
Drafted specifically for South African law — integrates the PDA (as amended in 2017), Companies Act section 159, PRECCA section 34, and King IV governance recommendations
Multiple reporting channels including independent external hotline and anonymous online portal — maximising accessibility and trust
Comprehensive anti-retaliation provisions aligned with PDA section 3 and LRA section 187(1)(h) automatic unfair dismissal protections
PRECCA section 34 mandatory reporting procedures ensuring directors fulfil their corruption reporting duty and avoid criminal prosecution
Tiered external disclosure guidance helping employees understand when and how to report externally under PDA sections 5, 7, and 9
Investigation procedures with defined timelines, independence requirements, and feedback mechanisms for whistleblowers
Board reporting framework providing audit committee oversight of the whistleblowing programme's effectiveness
Protection against malicious reports balanced with emphasis on good faith — preventing abuse without deterring legitimate reporting