Australia’s whistleblower laws promise protection, independence, and accountability. In practice, the company you reported selects the investigator, the General Counsel managing the response often sits across key oversight functions, and the board’s structure raises obvious questions about independent oversight. The law gives you a shield. The system hands it to the people you’re shielding against.
There’s a wonderful fiction at the heart of Australian corporate governance. It goes like this: if you see something wrong at a public company, you can report it safely, it will be investigated independently, and you will be protected from retaliation.
The Corporations Act says so. ASIC’s guidelines say so. The company’s own Whistleblower Policy – the one filed with the ASX alongside the Corporate Governance Statement – says so.
Everyone says so. Right up until you actually blow the whistle.
Then you discover that the company you reported is the company that investigates. The legal team you raised concerns about is the legal team that manages the response. The board structure itself may raise questions about how independent oversight operates in practice. And the independent investigator was previously a partner at a firm that acted for the company in major matters.
Welcome to the whistleblower problem. The law gives you a shield. The system hands it to the people you’re shielding against.
The Feedback Loop
When a protected disclosure lands at an ASX-listed company, here’s how it typically works in practice.
The same General Counsel who sits on a Foundation board alongside the very people connected to the conduct being reported – as publicly listed on the ACNC register. The same General Counsel who simultaneously serves on the Audit and Risk Committee of that Foundation – while also managing the company’s response to the whistleblower investigation. The same General Counsel whose former colleagues at prestigious law firms may have professional relationships with the individuals at the centre of the complaint.
These relationships are not typically disclosed. Nor are they always required to be. The whistleblower asks for confirmation that conflict protocols have been implemented. The silence that follows is deafening.
The General Counsel is often involved in selecting the external investigator. From the company’s existing professional network. The investigator is presented as having ‘no prior relationship’ with the company. While this may be accurate in a narrow sense, it does not necessarily capture broader historical connections – including prior involvement at firms that have acted on significant matters relating to the company or its predecessor entities.
These connections do not establish a formal conflict, but they raise legitimate questions about perceived independence in a whistleblower context.
Technical distinctions can be powerful. They allow statements to be accurate without necessarily reflecting the full context.
The company pays the investigator’s fees – fees that can run into the hundreds of thousands of dollars. The company defines the scope. The company provides the documents. The company identifies the witnesses. And the investigator submits findings to the same board where the CEO whose conduct is being investigated sits as Managing Director.
ASIC Regulatory Guide 270 recommends independence. It recommends conflict management. It recommends that whistleblowers be kept informed.
“Recommends” is doing a lot of heavy lifting in that sentence.
The Scalpel, Not the Hammer
The Corporations Act protects whistleblowers from “detriment.” The penalties are significant – up to $1,050,000 for individuals and $10,500,000 for companies. In ASIC v TerraCom Ltd [2022] FCA 1209, the Federal Court imposed $7.5 million and emphasised that penalties must carry sufficient “sting” relative to the respondent’s size.
But the Act works best when the retaliation is obvious. Fire the whistleblower – that’s actionable. Demote them – actionable. Cut their pay – actionable.
What happens when the retaliation is more creative?
Imagine a CEO who calls a board member of the whistleblower’s employer, to “discuss” the situation.
A board member who sits on a related Foundation, and who was at the time a partner at a firm that had previously advised the CEO’s company – and who had publicly listed that company among his clients. The same individual also shares prior professional connections with the General Counsel managing the whistleblower response.
Individually, these connections may be incidental. Taken together, they can raise questions about proximity and perceived independence in a whistleblower context.
Plausible deniability built into every layer. “I was just reaching out to a mutual contact.” “I was trying to facilitate resolution.” “I didn’t know about the disclosure.”
Or imagine a company that discloses a whistleblower’s employment history to a journalist. Not a lie – just “factual context.” The fact that the whistleblower worked there eight years ago. The characterisations, volunteered unprompted. To a journalist. During an active investigation. After eighteen months of correspondence in which employment history was never once mentioned.
Not retaliatory. Just… contextual.
Each act can be explained away. The phone call was well-intentioned. The disclosure was factual. The service denial is commercial discretion. The changing reasons are administrative updates. The flag on the account is a “system issue.”
But when a reasonable person looks at the pattern – the timing, the selectivity, the temporal proximity, the escalation, and the eighteen months of silence that preceded it – the pattern may become difficult to dismiss as coincidence.
The system protects against the hammer. It struggles with the scalpel. And the people wielding the scalpel know exactly where the line is drawn.
The Provision Nobody Talks About
Section 1317AC(3) of the Corporations Act contains the most powerful and least discussed provision in Australian corporate law.
Once a whistleblower establishes a protected disclosure and detriment, the burden reverses. The company must prove – on the balance of probabilities – that the detriment was not caused by the disclosure.
The company must prove a negative.
For a CEO who contacted a whistleblower’s employer seven days after a disclosure – through a board member with ties to a related Foundation and a former colleague of the General Counsel – the reverse onus means that CEO explains the timing under oath. Not the whistleblower. The CEO.
For a company that accessed eight-year-old employment records and volunteered them to a journalist during an active investigation – having never mentioned employment history across eighteen months of prior regulatory correspondence – the reverse onus means the company explains why. Under oath.
Parliament built this provision because it understood the information asymmetry. Only the company knows why it did what it did. So the company gets to explain.
That is a difficult burden to discharge.
The Cost of Silence
A large ASX-listed company can absorb a million dollars in investigation and legal costs as a rounding error on a $4.2 billion revenue line. The board approves the legal budget. The D&O insurer funds the defence. The General Counsel manages the process.
A whistleblower funds their case from personal savings. Twenty thousand dollars is a second mortgage. Fifty thousand is a year’s savings. The financial asymmetry exists to exhaust the individual before the system delivers accountability.
The cost protections in s1317AE(2) help – each party bears its own costs regardless of outcome. The company can’t recover its defence spend even if it wins. That’s significant. But cost protections reduce risk. They don’t eliminate cost.
What eliminates cost asymmetry is something the legislation didn’t anticipate: a whistleblower with a platform.
A platform with millions of views. Independent financial analysis read by over a hundred thousand investors. Governance commentary reaching sell-side analysts, proxy advisors, and – if LinkedIn profile views are any indication – the odd Executive Director at the corporate regulator.
The most effective whistleblower protection isn’t the Corporations Act. It’s transparency at scale. A whistleblower the market is watching is a whistleblower the company can’t quietly manage into silence.
That’s not what the system was designed for. But it’s what works.
The Independence Illusion
ASIC’s guidelines say whistleblower investigations must be independent. In practice, independence means whatever the company needs it to mean.
Imagine a company presents an investigator to the whistleblower as having “no prior relationship” with the company. But who spent two decades at the law firm that handled the company’s most significant corporate transaction. Whose former firm has acted in significant matters relating to the company.
Not a formal conflict. Just a professional history that the whistleblower discovers through public records – because nobody disclosed it.
Now imagine the General Counsel overseeing the investigation sits on a Foundation board connected to the same governance network as the person at the centre of the complaint. A former colleague of that person from the same law firm. And simultaneously a member of the Audit and Risk Committee responsible for overseeing the very investigation they’re managing.
The whistleblower asks – through the designated reporting channel – for confirmation that conflict management protocols have been implemented. The company’s response? Silence.
Not denial. Not confirmation. Silence.
That silence tells you everything about how seriously the company takes independence. Not the independence described in the policy document filed with the ASX. The independence that actually matters – the kind that requires disclosure, recusal, and the willingness to acknowledge that the people managing the process have relationships that compromise their objectivity.
Independence isn’t a box to tick in a governance statement. It’s a culture demonstrated through conduct. And when the conduct looks more like containment than accountability, the governance statement is just wallpaper.
The Federal Court: Where the Company Loses Control
When every internal process has been exhausted – when the investigation is conflicted, the General Counsel’s position may give rise to questions about perceived independence, the board’s structure raises obvious questions about its capacity for independent oversight, and the outcome is sanitised into a three-sentence message saying “appropriate actions have been taken” – the whistleblower is left with two options.
Accept it. Or go to the Federal Court.
The Federal Court is the one forum the company doesn’t control. A judge sets the timetable. Discovery tests what documents exist, what was said internally, and whether the explanations offered publicly survive contact with the contemporaneous record. Cross-examination tests the explanations the CEO rehearsed with external lawyers. And a judgment – if it comes – creates a permanent public record.
Most matters settle before trial. The commercial logic overwhelms the legal arguments once the company’s lawyers calculate the defence costs, the penalty exposure, the reputational damage of a public hearing, and the prospect of a CEO explaining a phone call under oath.
But settlement requires the credible threat of filing. And filing requires a whistleblower with evidence, funding, legal representation, and the stubborn persistence to see it through.
The effect is that the system can exhaust individuals before accountability is reached.
The Broader Question
Every ASX-listed company has a whistleblower policy. It’s mandatory. It sits in the Corporate Governance Statement alongside the board charter, the code of conduct, and the diversity policy.
The question is whether the policy is a living document or a compliance artefact.
Two independent directors on a ten-person board can’t oversee a whistleblower process when the other eight directors represent the interests the disclosure threatens. A General Counsel with undisclosed professional relationships to the individuals involved raises questions about perceived independence. An investigator selected from the company’s existing network may struggle to provide the level of independence contemplated by ASIC’s guidelines.
These are not purely theoretical concerns and can arise in practice. They reflect structural features of how public companies handle whistleblower disclosures in Australia. The legislation created the framework. The way the framework operates in practice can create outcomes that differ from its intent. And the gap between the two is where whistleblowers are managed into silence.
The law protects you on paper. The system protects the company in practice.
That’s the whistleblower problem. And until the enforcement matches the legislation, it’s not going away.
📩 Right of Reply
TPG Telecom, its directors, officers, and any individuals or entities who consider themselves referenced in this article are welcome to respond, clarify, or correct any matters raised. Any response received will be published in full and without editorial amendment.
⚖️ Disclaimer:
All views expressed are opinions, not statements of proven fact. References to corporate conduct, governance structures, and whistleblower processes are analytical commentary based on publicly available information and the author’s own experience. All entities and individuals retain the presumption of lawful conduct unless determined otherwise by a competent authority.
This article is general commentary on Australia’s whistleblower protection framework and the structural challenges facing individuals who make protected disclosures about ASX-listed companies. It is not legal advice and does not make allegations of specific wrongdoing against any named individual. The author has an active dispute with TPG Telecom and has made protected disclosures under the Corporations Act 2001 (Cth). Readers should form their own views and seek independent professional advice if relevant to their circumstances.
The author holds a very immaterial shareholding in TPG Telecom Limited (ASX: TPG). This should be considered when evaluating the commentary presented.
Previous posts in this series:
Post #65 – When The Music Stops
Post #66 – The $2B Problem TPG Can’t Afford
Post #67 – The Bonus Year: Thin Earnings, Thick Optics
Post #68 – Buying the Narrative
Leave a Reply