ASIC calls on Australian CEOs to review whistleblower policies

Whistleblowers are an essential part of an organisation’s ability to detect misconduct and identify, escalate and address issues.

ASIC has written to CEOs of public companies, large proprietary companies and trustees of registrable superannuation entities (RSEs) urging them to review their whistleblower policies to ensure they comply with the law.

ASIC reviewed a select sample of whistleblower policies and is concerned the majority of those policies did not fully address the relevant requirements.

As a result, whistleblowers may not know how they are protected, or feel unsure about how to speak up. This could lead to entities missing opportunities to identify and address potential misconduct at an early stage.

ASIC’s letter to CEOs:

  • Reminds entities of their obligation to have a whistleblower policy that reflects the strengthened whistleblower protection regime that started on 1 July 2019
  • identifies where policies in our sample fell short, and
  • highlights what entities can do to improve their policies.

ASIC Commissioner Sean Hughes said, ‘Whistleblowers help companies and RSEs identify problems and issues that they need to address to comply with the law and improve their performance. Whistleblower policies are essential for encouraging potential whistleblowers to speak up. Policies must clearly set out the legislated whistleblower protections and the process for reporting misconduct.’

‘We call on CEOs and RSE trustees to discuss this letter within your organisation and to think about the culture of speaking up in your workplace. If the issues we observed from our review are present in your policy, we expect you to address and correct them without delay.’

ASIC will continue to monitor compliance with the whistleblower policy requirements and the handling of whistleblower disclosures. ASIC plans to conduct a further review of whistleblower policies in the future. We will consider the full range of regulatory tools available, including enforcement action, where we identify non-compliance.

/Public Release. View in full here.