Whistleblower Protections

Source: OSHA Whistleblower Protection Program (29 U.S.C. § 660(c)), Sarbanes-Oxley Act (18 U.S.C. § 1514A), Dodd-Frank Wall Street Reform Act (15 U.S.C. § 78u-6), False Claims Act (31 U.S.C. § 3730), and over 20 additional federal whistleblower statutes. Enforced by OSHA, the SEC, and various federal agencies.

Last reviewed:

Written in plain language for general understanding. This is educational content, not legal advice. Based on federal statutes and official sources.

Federal Law

What is this right?

If you report illegal activity, safety violations, fraud, or other wrongdoing at your workplace, federal law protects you from retaliation. Your employer cannot fire, demote, harass, or otherwise punish you for blowing the whistle on unlawful conduct.

These protections exist across many federal laws — including workplace safety, financial fraud, environmental violations, and consumer protection — and cover both internal reports (to a supervisor) and external reports (to a government agency).

When does it apply?

Whistleblower protections apply when you report:

  • Workplace safety violations (OSHA)
  • Wage theft or FLSA violations
  • Environmental law violations (EPA)
  • Securities fraud or financial misconduct (SEC, Sarbanes-Oxley, Dodd-Frank)
  • Medicare/Medicaid fraud against the government (False Claims Act)
  • Discrimination or civil rights violations
  • Consumer product safety violations

Common misconceptions:

  • "I have to report to a government agency to be protected" — In many cases, internal reports to management or HR are also protected.
  • "I need proof before I report" — You need a reasonable, good-faith belief that a violation occurred. You don't have to be right.
  • "Whistleblower protection only covers public employees" — Many federal whistleblower statutes cover private-sector employees.

What should you do?

Step 1: Document the wrongdoing. Before reporting, write down what you observed — dates, specifics, who was involved, and any documents that support your account. Keep copies somewhere outside of work systems.

Step 2: Report to the right agency. File with the agency that oversees the relevant law (OSHA for safety, SEC for financial fraud, DOL for wage violations, etc.). You can also report internally, but don't rely on internal investigations alone.

Step 3: Document any retaliation immediately. If you're fired, demoted, reassigned, or treated differently after reporting, write it down with dates and specifics.

Step 4: File a retaliation complaint quickly. Deadlines are strict and vary by statute — some are as short as 30 days. Under Dodd-Frank (SEC) you have 6 years. Contact an attorney immediately if you face retaliation.

What should you NOT do?

Don't take company documents illegally. You can note what you saw, but removing confidential company documents (even to prove wrongdoing) can expose you to legal liability and undermine your case.

Don't wait after retaliation occurs. The clock starts when the retaliatory act happens — not when you realize it was retaliation. Filing deadlines can be as short as 30 days.

Don't report anonymously if you want full protection. Anonymous reports may not trigger the same retaliation protections. Consult an attorney about the tradeoffs.

Don't go to the media first. Reporting to media before government agencies can complicate your legal protections under some statutes.

You came here to know your rights — help someone else know theirs.

Support This Mission