Whistleblowing in Healthcare: Examples, Procedures and Reporting Concerns

What is whistleblowing in healthcare?

Whistleblowing in healthcare is when a worker raises a concern about malpractice, risk, wrongdoing, or possible illegality that harms—or creates a risk of harm to—patients, colleagues, or the wider public. That can include patient safety failures, fraud, unsafe staffing, poor practice, bullying with wider impact, or harassment.

In NHS settings the day-to-day language is often speaking up or raising concerns. In independent hospitals, primary care groups, and other regulated providers, “whistleblowing” and “speaking up” are used side by side. The practical idea is the same: workers should be able to surface risk without facing detriment for doing so.

The stakes are particularly high because patient safety and quality of care are directly affected. Serious failures in care—such as those at Mid Staffordshire before 2009—focused attention on NHS speaking-up culture and the need for concerns to be acted on, not only logged.

In UK law, whistleblowing is making a protected disclosure under the Public Interest Disclosure Act 1998 (PIDA), which amended the Employment Rights Act 1996. Workers who make protected disclosures are protected from unfair dismissal and detriment—if the statutory tests are met.

This guide covers healthcare settings broadly (NHS trusts, primary care, and independent providers). For Freedom to Speak Up Guardians and NHS England remits in depth, see Whistleblowing in the NHS. For care-home examples, CQC/CIW routes, and safeguarding overlap, see Whistleblowing in Care. For the legal basics, see What Is Whistleblowing? Meaning, Examples and UK Law. For how Disclosurely sits alongside FTSU, People routes, and Clinical Governance, see Healthcare.

This guide is for informational purposes only and does not constitute legal advice. Organisations and individuals should consult qualified legal professionals about their specific circumstances. If someone is at immediate risk of harm, contact the local safeguarding team or the police first.

Examples of whistleblowing in healthcare

These are realistic examples of concerns that could amount to whistleblowing. In each case, the worker must reasonably believe the information tends to show qualifying wrongdoing and that raising it is in the public interest.

Important: These are examples only. Whether a specific situation qualifies as a protected disclosure depends on the facts and legal tests. This is not legal advice.

These themes overlap with the concern types owned across People, FTSU, Safeguarding, and Clinical Governance in provider organisations. See how ownership typically works in Healthcare speaking-up routes.

Who can raise a concern in healthcare?

The definition of “worker” for whistleblowing is broad. In healthcare settings, speaking-up policies typically invite concerns from:

• Employees – full-time, part-time, and fixed-term
• Students on placement
• Locums
• Agency and bank workers
• Contractors working in clinical or support settings
• Volunteers (often by policy invitation)

Employment-law nuance: statutory PIDA protection attaches to “workers” as defined for whistleblowing purposes. That commonly includes employees, many agency workers, trainees, and some contractor arrangements. Volunteers are generally outside PIDA even where a trust or provider asks them to speak up. If your status is unclear, seek independent advice (for example from Protect or a union).

The NHS People Promise states that “we each have a voice that counts.” Making that real requires senior leaders to foster speaking-up and listening-up cultures—not only publishing a policy.

How to raise a whistleblowing concern in healthcare

Routes depend on the concern, your role, and which nation you work in.

Internal routes

1. Line manager or supervisor

Often the first step—unless your manager is implicated, conflicted, or you do not feel safe using that route.

2. Freedom to Speak Up Guardian

NHS trusts in England are expected to have one or more designated Freedom to Speak Up Guardians. Their purpose typically includes:

• protecting patient safety and quality of care
• improving the experience of staff
• promoting learning and improvement
• supporting workers who speak up
• helping address barriers to speaking up
• fostering a positive culture of speaking up

Guardians operate independently of day-to-day line management. Staff can usually contact them confidentially—and often anonymously. Guardians support speaking up; they do not replace investigations, People/HR processes, or safeguarding duties. For a fuller NHS-focused guide, see Whistleblowing in the NHS.

Independent providers outside the NHS FTSU framework should still nominate clear alternate contacts when line management is conflicted—typically a nominated whistleblowing officer, People lead, or board sponsor. See Speak-up programmes.

3. Senior leadership, People/HR, or risk/governance teams

Use these where the concern involves your manager, needs HR ownership, or sits with risk, quality, or Clinical Governance.

Organisational speaking-up should normally stay separate from clinical incident systems such as Datix, even when a patient-safety theme later feeds governance review. See Healthcare reporting workflow.

External routes

1. Care Quality Commission (CQC)

CQC is a prescribed person under PIDA and can receive whistleblowing concerns about care providers. It is important to understand what CQC can and cannot do.

CQC does not investigate every individual worker concern as a personal case. Information can inform when, where, and what to inspect. There is often a gap between what workers expect and how intelligence is used in practice.

2. NHS England

NHS England is a prescribed person under PIDA and can receive disclosures within defined England remits (confirm current scope before escalating). Its Speak Up Direct service provides impartial advice and support to NHS and social care workers.

3. Professional regulators

You can report fitness-to-practise concerns to the relevant professional regulator, including:

• General Medical Council (GMC) – doctors
• Nursing and Midwifery Council (NMC) – nurses and midwives
• Health and Care Professions Council (HCPC) – allied health professionals

4. NHS Counter Fraud Authority

For concerns about fraud and corruption in the NHS.

5. Independent National Whistleblowing Officer (INWO)

In Scotland, the INWO can review concerns where NHS procedures have been followed. The National Whistleblowing Standards set out how INWO expects NHS service providers to handle concerns.

Always check the current GOV.UK prescribed persons list before disclosing externally.

Independent advice organisations

• Speak Up Direct: free, independent, confidential advice on speaking up
• Protect: free, confidential legal whistleblowing advice

What is the Freedom to Speak Up Guardian network?

Freedom to Speak Up Guardians are a core part of the NHS speaking-up framework in England. They provide an alternative route when line management feels unsafe, ineffective, or conflicted.

When to approach a Guardian

You might approach a Freedom to Speak Up Guardian if:

• you are unsure whether your concern sits under speaking up
• you have already raised your concern internally and feel it has not been handled properly
• your line manager is involved in the issue
• you want confidential support before deciding what to do
• you want to raise a concern without speaking to your manager first

Product/process boundary: a reporting platform can structure organisational intake and case history alongside Guardian support. It does not perform the Guardian role. See Healthcare FAQs and Whistleblowing in the NHS.

Can healthcare staff report concerns anonymously?

Yes. Many healthcare organisations offer anonymous speaking-up options. There is an important distinction between anonymous and confidential reporting.

Anonymous vs confidential

Practical limitations

Even if you report anonymously, the substance of your report may reveal your identity—especially on a ward, theatre team, or primary-care site where only a few people witnessed an incident.

For trusts and provider groups that need structured anonymous and confidential portals with secure follow-up—kept separate from Datix and shared clinical mailboxes—see Healthcare and Anonymous reporting.

What protection do healthcare whistleblowers have?

Workers who make a protected disclosure are legally protected under UK employment law.

What is a protected disclosure?

Protection depends on:

• a qualifying disclosure — you reasonably believe the information tends to show a specified type of wrongdoing and that disclosure is in the public interest
• a protected route — for example to your employer, a Freedom to Speak Up / speaking-up route that counts as disclosure to the employer, a prescribed person such as NHS England or CQC, or another route that meets the statutory conditions

For a fuller legal walkthrough, see Protected disclosure explained.

Qualifying wrongdoing (summary)

The worker must reasonably believe the information tends to show one or more of:

• a criminal offence has been, is being, or is likely to be committed
• a breach of a legal obligation
• a miscarriage of justice
• a danger to the health or safety of any individual
• damage to the environment
• sexual harassment
• the deliberate concealment of information about any of the above

The belief has to be reasonable, but it does not have to be correct. A worker who reasonably believes wrongdoing is occurring may still be protected even if it turns out they were mistaken—subject to the route-specific tests.

Public interest

This requirement was added by the Enterprise and Regulatory Reform Act 2013 to stop PIDA being used to rebadge personal employment disputes as whistleblowing. Public interest does not mean the whole public has to be affected. A disclosure about conduct affecting a group of workers—or patient safety for a ward cohort—can satisfy the test. A purely personal grievance about the worker’s own contract usually cannot. See Public interest test explained.

Higher thresholds can apply to some external disclosures (including a reasonable belief that information is substantially true when disclosing to certain prescribed persons). Good faith is not required for liability after the 2013 reforms; a tribunal may still reduce compensation by up to 25% if it finds a disclosure was not made in good faith.

Protection from detriment

Workers are protected from being subjected to a detriment because they made a protected disclosure. That can include bullying or harassment, reduced hours, demotion, exclusion from meetings, or refused training.

Protection from unfair dismissal

Where an employee is dismissed because they made a protected disclosure—and the statutory conditions for that protection are met—the dismissal is automatically unfair. Simply labelling a concern as “whistleblowing” does not create that protection on its own.

Key points

• No qualifying service period for automatic unfair dismissal based on whistleblowing
• No ordinary unfair-dismissal financial cap on whistleblowing compensation
• Short tribunal time limits usually apply (often three months less one day, subject to ACAS Early Conciliation)
• Former workers can still bring detriment claims linked to a disclosure made while they worked there

Barriers to speaking up

Barriers remain significant. Research and national FTSU work have highlighted:

• additional barriers for workers from Black and minority ethnic backgrounds, including fear of victimisation and of being ignored after raising concerns
• reluctance linked to fear of being blamed, bullied, or damaged career prospects (themes emphasised in Sir Robert Francis KC’s Freedom to Speak Up work)

Legal protection is the floor. Culture, leadership behaviour, and usable reporting design determine whether staff actually speak up.

What happens after a healthcare whistleblowing concern is raised?

Processes vary by organisation, but typically:

1. Report received

The concern is logged. Contactable reporters should receive an acknowledgment.

2. Initial assessment

Intake assesses whether the matter sits under speaking-up / whistleblowing policy, People/HR ownership, Freedom to Speak Up support, safeguarding urgency, and/or clinical incident routes. Urgent safeguarding must never wait for employment-law labelling—see Safeguarding reporting and Whistleblowing in Care.

3. Investigation or referral

The concern may be investigated internally (management, People/HR, internal audit, Clinical Governance, or a specialist team) or referred externally (CQC, NHS Counter Fraud Authority, professional regulator, police).

4. Outcome and follow-up

Where contactable, reporters should usually be told what happened next—or why no further action was taken—without compromising others’ confidentiality. Detailed findings may be limited by employment rights and privacy.

5. Professional regulator handling

When concerns go to professional regulators such as the GMC, they may be closed after initial assessment or proceed to investigation, depending on the fitness-to-practise threshold.

Structured ownership, evidence handling, and chronologies matter when more than one team is involved. See Case management and What case management means in whistleblowing software.

Give healthcare staff a secure way to speak up

Disclosurely is secure disclosure software healthcare organisations use to receive anonymous and confidential concerns—with two-way follow-up, case ownership, evidence handling, and an audit trail—alongside Freedom to Speak Up, People, safeguarding, and Clinical Governance routes (not instead of them).

See Healthcare speaking-up routes →

Also useful when evaluating fit: Anonymous reporting · Whistleblowing software

What should healthcare organisations have in place?

Healthcare organisations should have robust whistleblowing / speaking-up arrangements—and evidence that they work.

CQC quality statement on speaking up

CQC’s quality statement on “Freedom to speak up” expects organisations to foster a positive culture where people feel they can speak up and their voice will be heard. That includes:

• staff and leaders acting with openness, honesty, and transparency
• a culture where staff actively raise concerns and those who do are supported, without fear of detriment
• leaders investigating concerns sensitively and confidentially, with lessons shared and acted on
• when something goes wrong, people receiving a sincere and timely apology and being told about actions taken

Good practice

• Clear reporting routes: staff know who to contact and how—including bank, locum, and multi-site workers
• Confidentiality: protection of reporter identity
• Anonymous options: ability to raise concerns without revealing identity where appropriate
• Acknowledgement: confirmation that reports have been received
• Secure follow-up: ability to clarify details without shared clinical mailboxes
• Case ownership: named responsibility, including an alternate when the usual handler is implicated
• Auditability: records of how concerns were handled for board and well-led conversations
• Protection against retaliation: a clear message that victimising those who speak up will not be tolerated
• Learning: themes shared and acted on without exposing case detail

For trusts and providers evaluating platform support alongside FTSU, see Healthcare, Whistleblowing software, and GDPR-conscious whistleblowing software.

Whistleblowing vs grievance in healthcare

Grievances can also contain whistleblowing elements if they disclose qualifying public-interest information and should be handled as such.

If a personal grievance also involves a wider patient-safety or systemic issue, handle both aspects.

For a detailed comparison, see Whistleblowing vs Grievance: What's the Difference?.

Whistleblowing in healthcare FAQs

What is whistleblowing in healthcare?

It is when a worker raises a concern about malpractice, risk, wrongdoing, or possible illegality that harms—or creates a risk of harm to—patients, colleagues, or the wider public. That might include patient safety failures, fraud, poor practice, or harassment with wider impact.

Who can whistleblow in the NHS and wider healthcare?

Employees, students on placement, locums, agency and bank workers, and many contractors. Volunteers may be invited to speak up by policy but are generally outside PIDA protection.

What is a Freedom to Speak Up Guardian?

An independent, impartial contact who supports NHS workers to raise concerns. NHS trusts in England are expected to have at least one. Guardians support speaking up; they do not replace investigations or safeguarding duties.

Can healthcare staff report concerns anonymously?

Yes. Traditional anonymous methods often make follow-up harder. Secure anonymous systems can allow two-way communication without revealing identity. Even then, the content of a report can identify you in a small team.

Can I be dismissed for whistleblowing in healthcare?

Not lawfully where the reason for dismissal is that you made a protected disclosure—and only if the statutory tests are met. Simply calling a concern “whistleblowing” is not enough.

What is the difference between a grievance and whistleblowing?

A grievance is usually personal to your employment. Whistleblowing is about public-interest wrongdoing. They can overlap—see Whistleblowing vs Grievance.

Who can healthcare staff report concerns to?

Internally: managers, Freedom to Speak Up Guardians (NHS trusts), People/HR, senior leaders, or risk/governance. Externally: CQC, NHS England (in remit), NHS Counter Fraud Authority, professional regulators, or INWO in Scotland.

Are healthcare whistleblowers protected from being victimised?

Yes—workers who make protected disclosures are protected from detriment because of that disclosure, subject to the statutory tests.

Where can healthcare workers get independent whistleblowing advice?

Speak Up Direct offers free, independent, confidential advice on the speaking-up process. Protect provides free, confidential legal whistleblowing advice.

Sources

1. NHS England – Freedom to Speak Up
2. NHS England – Annual report on whistleblowing disclosures (prescribed person)
3. Care Quality Commission – Raise a concern
4. GOV.UK – Whistleblowing for employees
5. GOV.UK – List of prescribed people and bodies
6. Independent National Whistleblowing Officer
7. Protect – independent whistleblowing advice
8. ACAS – Whistleblowing at work

This guide is for informational purposes only and does not constitute legal advice. Organisations and individuals should consult qualified legal professionals about their specific circumstances.