Whistleblowing Policy
Template — South Africa
An attorney-drafted Whistleblowing (Protected Disclosures) Policy template designed specifically for South African organisations. This comprehensive, legally compliant document enables employees and stakeholders to report fraud, corruption, and misconduct without fear of retaliation — covering the Protected Disclosures Act 26 of 2000 (amended 2017), Companies Act section 159 protections, PRECCA section 34 reporting duties, anonymous and confidential reporting channels, investigation procedures, and comprehensive anti-retaliation provisions.
What is a Whistleblowing Policy in South Africa?
A Whistleblowing Policy is a workplace ethics document that implements the Protected Disclosures Act 26 of 2000 (as amended by Act 5 of 2017), Companies Act Section 159, and the PRECCA Section 34 mandatory reporting duty. It establishes multiple confidential and anonymous reporting channels, guarantees anti-retaliation protection, and creates the internal escalation path for corruption reports of R100,000 or more to the SAPS within a reasonable time.
Drafted and reviewed by
Attorney & Founder, My-Contracts.co.za · Legal Practice Council of South Africa (LPC F17333)
Last legal review
Whistleblowing Policy TL;DR
The Whistleblowing Policy is the operational vehicle for South Africa's Protected Disclosures Act 26 of 2000 (substantially amended by Act 5 of 2017). The 2017 amendments expanded the definition of "employee" to include workers, independent contractors, and consultants; broadened "occupational detriment" to cover any retaliatory action; and enhanced Labour Court remedies to compensation of up to 24 months' remuneration. Dismissal for a protected disclosure is automatically unfair under LRA Section 187(1)(h). The policy also operationalises Companies Act 71 of 2008 Section 159 (which protects disclosures to the CIPC, Companies Tribunal, and regulators), integrates with the PRECCA Section 34 mandatory duty to report corrupt transactions of R100,000 or more to the SAPS within a reasonable time (failure to report carries 10 years' imprisonment), and implements King IV Principle 2 governance expectations. Multiple confidential and anonymous channels — independent external hotlines, online portals, compliance officer — are essential to credibility.
Also known as: Protected Disclosures Policy, Speak-Up Policy, Tip-Off Policy, Ethics Hotline Policy, Disclosure Policy, PDA Compliance Policy, Ethics Reporting Policy.
Why Your Business Needs This Agreement
Fraud and Corruption Undetected Due to Absent Reporting Channels
The Association of Certified Fraud Examiners (ACFE) consistently reports that tips are the most common method for detecting occupational fraud — accounting for over 40% of all fraud discoveries globally. Organisations without accessible, trustworthy whistleblowing channels miss these tips, allowing fraud and corruption to continue undetected for years. The median duration of fraud before detection in organisations without hotlines is twice that of organisations with hotlines. The cumulative financial loss from undetected fraud can be catastrophic.
Automatic Unfair Dismissal Awards for Whistleblower Retaliation
Employers who retaliate against whistleblowers face automatically unfair dismissal claims under LRA section 187(1)(h), carrying compensation of up to 24 months' remuneration — double the ordinary unfair dismissal cap. Even occupational detriment short of dismissal can result in Labour Court orders requiring remediation and interdicts preventing further retaliation. Without a Whistleblowing Policy establishing clear anti-retaliation protections and training for managers, organisations expose themselves to these enhanced legal consequences.
Criminal Prosecution for PRECCA Section 34 Reporting Failures
Directors and senior managers who become aware of corruption involving R100,000 or more and fail to report it to the SAPS face criminal prosecution under PRECCA section 34, with imprisonment of up to 10 years. Without a Whistleblowing Policy establishing internal escalation procedures that trigger the section 34 duty, directors may fail to report — not from intent to conceal, but from organisational confusion about when and how to fulfil the duty. The absence of a policy is no defence to a section 34 prosecution.
Damaging External Disclosures to Media Due to Internal Channel Failures
When employees do not trust internal reporting channels — or when no channels exist — they are more likely to make external disclosures to the media under PDA section 9. External media disclosures cause severe reputational damage that internal resolution would have avoided. The PDA's tiered framework is designed to incentivise internal reporting, but this only works if the organisation has accessible, credible internal channels. A Whistleblowing Policy with an independent external hotline creates the trusted internal mechanism that reduces external disclosure risk.
King IV Governance Non-Compliance
King IV Principle 2 explicitly recommends whistleblowing mechanisms as part of the ethics governance framework. For listed companies, state-owned enterprises, and organisations that apply King IV (which includes most significant South African businesses), the absence of a Whistleblowing Policy represents a governance failure. Institutional investors, rating agencies, and governance assessors increasingly scrutinise the existence and effectiveness of whistleblowing programmes as an indicator of ethical governance maturity.
What is a Whistleblowing Policy?
South Africa's Protected Disclosures Act 26 of 2000 (PDA), as substantially amended in 2017, provides the legal framework for whistleblower protection — shielding employees who disclose information about unlawful or irregular conduct in the workplace from occupational detriment. The 2017 amendments significantly expanded the Act's reach: the definition of "employee" was broadened to include workers, independent contractors, consultants, and agents; the definition of "occupational detriment" was expanded to cover a wider range of retaliatory actions; and the remedies available through the Labour Court were enhanced, including compensation of up to 24 months' remuneration for unfair dismissal.
The importance of a formal Whistleblowing Policy cannot be overstated in the South African context. The country's corporate governance framework — anchored by the King IV Report on Corporate Governance — explicitly recommends that organisations establish ethical cultures supported by accessible reporting mechanisms and robust whistleblower protection. The Companies Act 71 of 2008 reinforces this through section 159, which provides additional protections for persons who make disclosures about company affairs to the CIPC, the Companies Tribunal, or other regulatory bodies. The Prevention and Combating of Corrupt Activities Act 12 of 2004 (PRECCA) adds a mandatory dimension through section 34, which requires persons in positions of authority to report corrupt transactions involving R100,000 or more to the South African Police Service — failure to report is a criminal offence carrying imprisonment of up to 10 years.
The PDA establishes a tiered disclosure framework that encourages internal reporting as the first step. Section 6 protects disclosures made to the employer. Section 5 protects disclosures to legal advisers. Section 7 protects disclosures to certain prescribed bodies including the Public Protector, the Auditor-General, and other regulatory authorities. Section 9 protects disclosures to external parties (including the media) only in limited circumstances — where the whistleblower reasonably believes they will be subjected to occupational detriment for internal reporting, where evidence may be destroyed, or where the matter is of an exceptionally serious nature. This tiered approach incentivises organisations to establish effective internal reporting mechanisms — the more accessible and trustworthy the internal channels, the less likely employees are to make damaging external disclosures.
The Protected Disclosures Act makes dismissal for whistleblowing automatically unfair under Section 187 of the LRA — compensation cap 24 months' remuneration, double the ordinary ceiling.
This attorney-drafted Whistleblowing Policy template creates a comprehensive framework covering multiple confidential and anonymous reporting channels (including an independent ethics hotline), clear definitions of reportable conduct, investigation procedures with defined timelines and responsibilities, robust anti-retaliation protections aligned with the PDA, confidentiality and anonymity safeguards, external disclosure guidance, record-keeping and board reporting requirements, and integration with the organisation's Anti-Bribery Policy and Code of Conduct.
Who Needs This
Want early access to the Whistleblowing Policy template?
We'll email you the moment early access opens
What a Whistleblowing Policy Must Include Under South African Law
Clauses required by the Protected Disclosures Act 26 of 2000 (as amended by Act 5 of 2017), Companies Act Section 159, PRECCA Section 34, and King IV Principle 2 for a robust Whistleblowing Policy.
| Clause | Required / Recommended By | Key Reference |
|---|---|---|
| Policy statement and board-endorsed ethical commitment | King IV Principle 2 | King IV Report on Corporate Governance 2016 |
| Broad scope covering employees, workers, contractors, consultants | Protected Disclosures Act (2017 amendments) | PDA Section 1 amended definitions |
| Categories of reportable conduct | Protected Disclosures Act 26 of 2000 | PDA Section 1 "protected disclosure" |
| Multiple internal reporting channels including Ethics Officer | Protected Disclosures Act 26 of 2000 | PDA Sections 5 and 6 |
| Independent external hotline (24/7, anonymous option) | King IV Principle 2 | King IV Application Register |
| Tiered external disclosure guidance (Sections 5, 7, 9) | Protected Disclosures Act 26 of 2000 | PDA Sections 5, 7, 9 |
| Investigation procedures with defined timelines | Best practice; procedural fairness | Audi alteram partem |
| Prohibition on retaliation and occupational detriment | Protected Disclosures Act 26 of 2000 | PDA Section 3 |
| Automatically unfair dismissal protection | Labour Relations Act 66 of 1995 | LRA Section 187(1)(h) |
| PRECCA Section 34 mandatory reporting workflow | Prevention and Combating of Corrupt Activities Act 12 of 2004 | PRECCA Section 34 |
| Confidentiality and anonymity safeguards | Protected Disclosures Act; POPIA | PDA Section 3; POPIA Section 14 |
| Quarterly board reporting and annual review | King IV Principle 2 | King IV governance framework |
The PDA (amended 2017) protects whistleblowers from all forms of occupational detriment — dismissal for whistleblowing is automatically unfair under LRA section 187(1)(h) with compensation up to 24 months' remuneration
PRECCA section 34 requires directors and managers to report corrupt transactions involving R100,000+ to the SAPS — failure to report carries imprisonment up to 10 years
Tips are the most common method for detecting occupational fraud (40%+ of all detections) — organisations without whistleblowing hotlines take twice as long to detect fraud
The 2017 PDA amendments expanded protections to workers, independent contractors, and consultants — not just traditional employees
King IV Principle 2 explicitly recommends whistleblowing mechanisms as a core component of ethical governance — absence indicates governance failure
Key Clauses Included
This Whistleblowing Policy template covers 11 essential sections, each drafted by South African attorneys.
Policy Statement, Scope & Ethical Commitment
Board-endorsed commitment to an ethical workplace culture where employees feel safe to report concerns without fear of retaliation. Definition of protected disclosures under the PDA. Scope covering employees, workers, independent contractors, consultants, temporary staff, former employees (for matters arising during their employment), and in certain circumstances, suppliers and clients. The distinction between whistleblowing (reporting of serious impropriety) and grievances (personal workplace complaints).
Reportable Conduct — What Can Be Disclosed
Comprehensive categories of reportable conduct: criminal offences (fraud, theft, corruption, bribery, money laundering), failure to comply with a legal obligation (tax evasion, regulatory non-compliance, environmental violations), miscarriages of justice, endangerment of health or safety, damage to the environment, unfair discrimination, financial mismanagement or irregularities, conflicts of interest, abuse of authority, cover-ups of any of the above, and any other conduct that the whistleblower reasonably believes constitutes an irregularity.
Internal Reporting Channels
Multiple internal mechanisms designed to be accessible, confidential, and trustworthy: (1) direct disclosure to the line manager, (2) disclosure to the HR department, (3) disclosure to the designated Ethics Officer or compliance function, (4) an independent external ethics hotline operated by a third-party provider (available 24/7, telephone and online, with multilingual support), (5) an anonymous online reporting portal. The hotline and portal must be operated independently of management to ensure credibility and confidentiality.
External Reporting — When & How
Guidance on the PDA's tiered external disclosure framework: section 5 (disclosure to a legal adviser — always protected), section 7 (disclosure to prescribed bodies including the Public Protector, Auditor-General, SAPS, Information Regulator, CIPC, and sector-specific regulators — protected where made in good faith and the whistleblower reasonably believes the information is substantially true), section 9 (general protected disclosure to external parties including the media — protected only in limited circumstances including reasonable belief of retaliation, evidence destruction, or exceptional seriousness). The policy encourages internal reporting first but acknowledges the legal right to external disclosure.
Investigation Procedures & Timelines
Step-by-step investigation process: receipt and acknowledgement of the report within 48 hours, preliminary assessment by the Ethics Officer to determine jurisdiction and priority, appointment of an impartial investigator (internal or external depending on the severity and seniority of the implicated persons), terms of reference for the investigation, evidence gathering, witness interviews with confidentiality protections, interim measures where necessary (e.g., precautionary suspension of implicated persons), completion of the investigation within 60 calendar days, findings and recommendations report, and feedback to the whistleblower (to the extent possible without compromising the investigation or the rights of implicated persons).
Anti-Retaliation Protections
Comprehensive protections aligned with section 3 of the PDA: prohibition on dismissal, suspension, demotion, transfer, refusal of promotion, harassment, intimidation, disciplinary action, threats, withholding of benefits, or any other occupational detriment against any person who makes or is believed to have made a protected disclosure. Employees who suffer retaliation may approach the Labour Court for relief including reinstatement, compensation of up to 24 months' remuneration, and a restraining order. The policy commits to treating retaliation as a serious disciplinary offence warranting dismissal of the retaliator.
Confidentiality, Anonymity & Information Security
Measures to protect the identity of whistleblowers: the default position is confidential reporting (the identity is known to the Ethics Officer but protected from general disclosure), with anonymous reporting available through the hotline and portal. Information security measures for whistleblowing records — encrypted storage, restricted access, separate from general HR records. The limitations on confidentiality where legal proceedings require disclosure and the process for informing the whistleblower if their identity may need to be disclosed.
PRECCA Section 34 Mandatory Reporting
Specific procedures for complying with the PRECCA section 34 mandatory reporting duty: when the investigation reveals corrupt transactions involving R100,000 or more, persons in positions of authority (directors, senior managers, the compliance officer) must report to the SAPS. Internal escalation procedures to ensure the section 34 duty is triggered. The timeframe for reporting. Documentation of the SAPS report. The criminal consequences of failure to report (imprisonment up to 10 years). Integration with the Anti-Bribery and Corruption Policy.
Protection Against Malicious or False Reports
Clear statement that the PDA protects disclosures made in good faith and with a reasonable belief that the information is substantially true — it does not protect deliberately false, malicious, or vexatious reports. An employee who makes a demonstrably false report with the intention to harm another person may face disciplinary action. However, the policy emphasises that the vast majority of reports are genuine, that an incorrect report is not a false report (the test is reasonable belief, not proof), and that the fear of being labelled a false accuser must not deter legitimate reporting.
Board Reporting, Trends & Oversight
Requirements for reporting whistleblowing activity to the board or audit committee: quarterly reports on the number and nature of reports received, investigation status and outcomes, trends and patterns, emerging risks identified through reports, and the effectiveness of the whistleblowing programme. Annual review of the policy against PDA amendments, King IV recommendations, and organisational experience. The audit committee's oversight role in ensuring the independence and effectiveness of the whistleblowing function.
Integration with Related Policies & Procedures
Cross-references to the Code of Conduct (defining the ethical standards whose breach is reportable), the Anti-Bribery and Corruption Policy (defining corruption-related reportable conduct and the section 34 duty), the Grievance Procedure (distinguishing personal grievances from protected disclosures), the Sexual Harassment Policy (where harassment is reported through the whistleblowing channel rather than the harassment procedure), and the IT Acceptable Use Policy (for cyber-related disclosures).
South African Law Compliance
Protected Disclosures Act 26 of 2000 (amended 2017)
The primary whistleblower protection statute. Section 3 prohibits occupational detriment against whistleblowers. Section 6 protects disclosures to the employer. Section 7 protects disclosures to prescribed regulatory bodies. Section 9 protects general disclosures in limited circumstances. The 2017 amendments expanded the definition of "employee" to include workers, independent contractors, and consultants; expanded the definition of "occupational detriment"; enhanced Labour Court remedies to include compensation of up to 24 months' remuneration; and strengthened protections against retaliatory litigation.
Companies Act 71 of 2008
Section 159 provides additional protections for persons who disclose information about companies to the CIPC, the Companies Tribunal, the Takeover Regulation Panel, a court, a regulatory authority, or an exchange. The protection applies to shareholders, directors, company secretaries, prescribed officers, registered trade unions, and employees. Section 159 disclosures are made in terms of the Companies Act itself, not the PDA, creating a parallel but complementary protection framework.
Prevention and Combating of Corrupt Activities Act 12 of 2004
Section 34 creates a mandatory reporting duty for persons in positions of authority (directors, managers, partners) who know or suspect corrupt transactions involving R100,000 or more — they must report to the SAPS. Failure to report is a criminal offence carrying imprisonment of up to 10 years. The whistleblowing policy integrates with the PRECCA reporting duty, establishing procedures for internal escalation and external reporting when investigation findings trigger the section 34 obligation.
King IV Report on Corporate Governance for South Africa, 2016
Principle 2 recommends that the governing body should govern the ethics of the organisation in a way that supports the establishment of an ethical culture. The King IV application register specifically recommends: the establishment of an ethics management framework, the provision of a safe mechanism for stakeholders to report unethical conduct (whistleblowing), and the protection of whistleblowers from retaliation. The whistleblowing policy is a core component of the King IV ethics governance framework.
Labour Relations Act 66 of 1995
Section 187(1)(h) renders a dismissal automatically unfair if the reason for the dismissal is that the employee made a protected disclosure in terms of the PDA. Automatically unfair dismissal carries compensation of up to 24 months' remuneration (double the ordinary unfair dismissal cap of 12 months). Section 186(2) defines unfair labour practices, which includes subjecting an employee to detriment for making a protected disclosure. The LRA provides the enforcement mechanism for PDA protections in the employment context.
South African businesses are lining up for My-Contracts — be first in when we launch
Create Your Whistleblowing Policy in Minutes
Our guided wizard walks you through every clause — no legal knowledge required. Attorney-drafted, South African law compliant.
Appoint an Ethics Officer and procure an independent hotline
Designate a senior, independent Ethics Officer — ideally at executive or sub-executive level with direct reporting access to the CEO and audit committee — to manage the whistleblowing programme. The appointee should be separated from operational management so that reports involving operations can be handled without conflict. Procure an independent external ethics hotline operated by a specialist provider such as Deloitte Tip-offs Anonymous, Whistleblowers (Pty) Ltd, or equivalent — the hotline must be available 24 hours a day and seven days a week, support all major South African languages, and offer both telephone and online reporting with a genuine anonymous option (no caller ID capture). The hotline's independence from management is the single most important credibility factor; internally managed hotlines record materially fewer reports than independent ones because employees do not trust confidentiality.
Customise the template for your organisation
Complete the policy template with your organisation's specific reporting channels (Ethics Officer email, independent hotline number, online portal URL, external legal adviser contact), escalation protocols where the subject of the disclosure is a senior executive or director (reports bypass the CEO to the Chairperson of the Audit Committee or Board), and the PRECCA Section 34 mandatory reporting workflow for corrupt transactions of R100,000 or more. Cross-reference the policy with the Code of Conduct, Anti-Bribery and Corruption Policy, Grievance Procedure, and Sexual Harassment Policy so that employees understand which channel to use for which type of concern. Explicitly list the "prescribed bodies" under PDA Section 7 (Public Protector, Auditor-General, SAPS, Information Regulator, CIPC, sector regulators) for tiered external disclosure guidance.
Communicate the policy and build trust in the programme
Distribute the policy to every employee, worker, independent contractor, and consultant — the 2017 PDA amendments extended coverage beyond traditional employees, so communication must reach the same population. Display reporting channel details prominently in break rooms, on the intranet, on payslip attachments, in email signatures, and on posters at site entrances. Conduct awareness training emphasising that reporting is protected, that good-faith reports cannot backfire on the reporter, that retaliation is a separate disciplinary offence warranting dismissal, and that the hotline is genuinely independent. Build trust through visible board and CEO commitment — demonstrating that past reports have been taken seriously and investigated promptly, and where warranted, resulted in disciplinary action or criminal referral, is the most persuasive signal.
Train managers on anti-retaliation obligations and protected disclosure recognition
Provide specialist training to every manager and supervisor on three themes. First, the absolute prohibition on retaliation under PDA Section 3 and the automatically unfair dismissal consequence under LRA Section 187(1)(h), which carries compensation of up to 24 months' remuneration — double the ordinary unfair dismissal cap. Second, how to respond when a direct report raises a concern that may constitute a protected disclosure — including the duty to escalate to the Ethics Officer without investigating or attempting to dissuade the reporter, and the prohibition on sharing the reporter's identity. Third, the manager's own Section 34 PRECCA duty if they are a person in a position of authority and the disclosure involves a corrupt transaction of R100,000 or more. Managers are the front line of whistleblower protection — or the most common source of retaliation and Section 34 reporting failures.
Build the investigation workflow and interim measures protocol
Draft an investigation workflow template that satisfies procedural fairness. Within 48 hours of receipt, the Ethics Officer acknowledges the report and conducts a preliminary assessment. An impartial investigator is appointed — external where the subject is a senior executive or where internal bias is a risk, internal for routine matters. Terms of reference are drafted. Interim measures are implemented where needed — precautionary suspension of the subject with full pay, physical relocation, or reporting-line change — always protecting the reporter from retaliation. Evidence is gathered (documents, electronic forensics, witness interviews under confidentiality). The subject is given audi alteram partem opportunity. Findings are documented in a confidential report within 60 calendar days. Recommendations are made to the appropriate decision-maker. The reporter receives feedback to the extent compatible with the subject's procedural rights.
Operationalise PRECCA Section 34 and Companies Act Section 159
Build a specific workflow for disclosures that trigger PRECCA Section 34 — any corrupt transaction of R100,000 or more requires persons in positions of authority to report to the SAPS within a reasonable time. The workflow must identify who in the organisation bears the Section 34 duty (directors, senior managers, the compliance officer), establish an internal escalation process that ensures the duty is triggered rather than missed, document every decision point, and record the SAPS report with its case reference number. Failure to report carries imprisonment of up to 10 years — directors have been prosecuted under Section 34 in the Gupta and State Capture matters. For Companies Act Section 159 disclosures (to the CIPC, Companies Tribunal, Takeover Regulation Panel, or exchanges), build a parallel process recognising that Section 159 provides overlapping but distinct protection.
Report to the board quarterly and review the policy annually
Establish quarterly reporting to the audit committee (or board where no audit committee exists) covering the number and nature of reports received, investigation status and outcomes, trends and emerging risks identified, the effectiveness of the programme (including any Section 34 reports made and retaliation complaints investigated), and programme improvements. This is King IV Principle 2 in action — the governing body is expected to govern the ethics of the organisation. Review the policy annually against PDA amendments, Labour Court and Labour Appeal Court developments on occupational detriment, PRECCA prosecution trends, King IV update bulletins, and organisational learning. Test the hotline periodically with a documented pilot submission to confirm it functions. Record every programme change in the board minutes.
Frequently Asked Questions
A protected disclosure is a disclosure of information regarding conduct by an employer or fellow employee that the whistleblower reasonably believes shows: a criminal offence, a failure to comply with a legal obligation, a miscarriage of justice, endangerment of the health or safety of any individual, damage to the environment, or unfair discrimination — or any conduct that constitutes a deliberate concealment of information tending to show any of the above. The disclosure must be made in good faith and substantially in accordance with the PDA's disclosure procedures. The whistleblower does not need to prove that the misconduct actually occurred — a reasonable belief that the information is substantially true is sufficient for protection.
This whistleblowing policy page answers
- Protected Disclosures Act 26 of 2000 amendments 2017
- what is a protected disclosure in South Africa
- whistleblower protection automatic unfair dismissal
- anonymous hotline requirements South Africa
- PRECCA section 34 reporting duty R100000
- King IV whistleblowing governance
- retaliation against whistleblower Labour Court
- Companies Act section 159 protected disclosures
- tiered disclosure PDA sections 5 6 7 9
- occupational detriment definition 2017 amendments
Terms used in this Whistleblowing Policy
Definitions, statutory basis, and cross-links to every template that uses each term.
What You Get With This Template
Drafted specifically for South African law — integrates the PDA (as amended in 2017), Companies Act section 159, PRECCA section 34, and King IV governance recommendations
Multiple reporting channels including independent external hotline and anonymous online portal — maximising accessibility and trust
Comprehensive anti-retaliation provisions aligned with PDA section 3 and LRA section 187(1)(h) automatic unfair dismissal protections
PRECCA section 34 mandatory reporting procedures ensuring directors fulfil their corruption reporting duty and avoid criminal prosecution
Tiered external disclosure guidance helping employees understand when and how to report externally under PDA sections 5, 7, and 9
Investigation procedures with defined timelines, independence requirements, and feedback mechanisms for whistleblowers
Board reporting framework providing audit committee oversight of the whistleblowing programme's effectiveness
Protection against malicious reports balanced with emphasis on good faith — preventing abuse without deterring legitimate reporting