Whistleblowing protections in Ireland
Reviewed by Mellow Editorial Team, HR & payroll content team
Whistleblowing protections in Ireland give employees a legal right to report wrongdoing without fear of penalisation — and they place real obligations on employers to handle those reports properly.
What the law says
The Protected Disclosures Act 2014, significantly strengthened by the Protected Disclosures (Amendment) Act 2022, is the core legislation. The 2022 amendments implemented the EU Whistleblowing Directive and extended protections considerably. They also introduced mandatory formal reporting channels for organisations above certain size thresholds.
A "protected disclosure" is a report made by a worker who reasonably believes it reveals relevant wrongdoing. The worker does not need to be right — reasonable belief is enough. This is an important point. An employee who raises a concern in good faith is protected even if the concern turns out to be unfounded.
Relevant wrongdoing covers a broad range: criminal offences, failure to comply with legal obligations, miscarriages of justice, health and safety risks, environmental damage, and more. It also includes attempts to conceal any of the above.
Who is protected
The Act covers a wide range of people beyond just employees. Workers, contractors, trainees, agency workers, shareholders, volunteers and job applicants can all fall within scope. In practice, the protection extends to almost anyone with a connection to the organisation.
A worker who makes a protected disclosure is protected from penalisation. Penalisation includes dismissal, demotion, reduced pay, harassment, coercion, and any other unfavourable treatment linked to the disclosure. Crucially, penalisation claims can be taken to the Workplace Relations Commission (WRC), and the burden of proof shifts to the employer to show that any adverse treatment was not connected to the disclosure.
Interim relief is also available. A worker who is dismissed can apply to the WRC within 21 days for an order reinstating or re-engaging them while the case proceeds. This is a significant remedy and one employers should be aware of.
Employer obligations
For private sector employers with 50 or more workers, the 2022 Act requires you to establish formal internal reporting channels. These must:
- Allow reports to be made confidentially
- Acknowledge receipt within seven days
- Give a response on the status of the investigation within three months
- Be managed by an impartial person or team
Employers with fewer than 50 workers are not currently required to maintain formal channels, but the protections still apply. A worker at a small employer can still make a protected disclosure to a prescribed person, a relevant regulatory body, or in some cases publicly.
Even where formal channels are not legally required, having a clear, accessible internal whistleblowing policy is good practice. It gives workers a route to raise concerns internally before escalating, and it demonstrates a culture of accountability.
Confidentiality
The identity of the person making a disclosure must be kept confidential unless they consent to disclosure or disclosure is required by law. Breaching confidentiality is not just a reputational risk — it can itself constitute penalisation if it leads to adverse treatment of the worker.
You should think carefully about who within the organisation handles reports. A small management team where everyone knows each other creates obvious risks. Designating a specific trusted person or using an external reporting service reduces those risks and supports genuine impartiality.
What happens when a complaint is made
When a report comes in, you need a defined process. That means:
1. Acknowledging receipt promptly
2. Assessing whether the disclosure falls within scope
3. Investigating appropriately — proportionate to the seriousness of the concern
4. Recording steps taken
5. Communicating outcomes to the reporter within the statutory timeframe
If the alleged wrongdoing involves senior management, standard internal channels may be compromised. In that case, having an escalation route — such as to a board member, an audit committee, or an external body — is sensible.
Document everything. If a claim later reaches the WRC, you will need to show what you did and when. Gaps in documentation are hard to explain.
Common mistakes employers make
Treating a protected disclosure as a conduct issue is one of the most serious errors. If an employer disciplines a worker shortly after receiving a disclosure, the WRC will examine whether there is a causal link. Even where the disciplinary action is entirely separate and justified, you need contemporaneous records proving that.
Failing to respond within the required timeframes is another practical problem. Three months sounds like a long time, but investigations can move slowly, especially where multiple people are involved. Build in review points so nothing falls through the gaps.
Finally, assuming the Act only applies to large companies is a mistake. The internal channel requirement has a threshold, but the protections themselves apply regardless of employer size. Every employer in Ireland needs to understand the basics of the Act.
---
This article is general information only and does not constitute legal advice. If you are dealing with a specific disclosure or potential claim, you should seek independent legal advice.
---
Run HR and payroll in Ireland with Mellow
Mellow brings HR, payroll and 12 AI agents into one platform — built to handle Ireland properly, with payroll included, from £4 per employee per month. The AI agents don't just answer questions; they generate contracts, run cost estimates and draft letters for you.
[Start a free trial →](/register)