Put a whistleblower policy in writing

A common problem is relying on a generic policy that says concerns can be reported, but does not explain who receives reports, how confidentiality is handled, or what protections apply in practice. Another issue is having policy wording that does not match the way concerns are actually escalated inside the organisation. A useful whistleblower policy should fit your reporting lines, management structure and record-handling processes. The legal position can also depend on how information is handled in practice, not just what the document says.

It will usually cover the types of wrongdoing or serious concerns that can be reported, who can make a disclosure, the available reporting channels, how anonymous or confidential reports are treated, and the organisation's approach to victimisation or retaliation. It may also explain how reports are assessed, who is responsible for receiving them, and what happens after a concern is raised. The exact wording often depends on whether reports are made to managers, a dedicated contact person, or an external reporting channel.

We usually need a practical picture of how your organisation is set up, including who may raise concerns, who should receive reports, whether you want multiple reporting options, and how sensitive information is stored or shared internally. It also helps to know whether you already have related policies, such as conduct, grievance or privacy documents, so the wording can work consistently across your documents. Privacy wording works best when it is matched to your real collection, use, storage and disclosure practices.

Generic templates can leave gaps where the commercial model, customer journey or risk profile is more specific than the precedent assumes. However, it often stays too general for real use. For example, it may not reflect your reporting structure, confidentiality processes, or the categories of people connected to your organisation who should be covered. It may also leave gaps around anonymous reporting, escalation steps or interactions with other internal policies. Tailored drafting is often more useful where your organisation has managers across different teams, handles sensitive information, or wants clearer internal accountability for receiving and assessing disclosures.

No. This service covers the legal drafting or review of the whistleblower policy itself and related comments on the document. It does not include running investigations, interviewing staff, acting as an external whistleblower officer, technical implementation, security remediation, or ongoing representation. If you need broader workplace rollout support, training sessions or advice on a live complaint, that would usually need separate work. This page is aimed at getting the core policy document in place, rather than managing the full reporting process for you.

Submit an enquiry on this page or click 'Get started'. One of our legal consultants will review it within 1 business day and get in touch to understand what you need.

Your consultant will then email you a fixed-fee quote setting out the cost, scope and timing. If you're happy with it, you can accept the quote and sign our engagement letter online.

Once you've accepted, one of our Australian-qualified lawyers will work with you to complete your project. They'll contact you by email or phone if they need anything.

Sprintlaw works on fixed-fee pricing wherever possible, so you can review the scope and cost before you decide whether to proceed. For the Whistleblower Policy service, pricing starts from $900.00.

After you enquire, a legal consultant will confirm what is included, the expected timing and whether any extra work is needed before you engage us.

We work online, so we can help wherever you are in New Zealand. Our team works remotely, mainly from Australia.

Your work is done by our Australian-qualified lawyers, who hold Australian practising certificates and specialise in business law. None of them are New Zealand lawyers or hold a New Zealand practising certificate.

Sprintlaw NZ Limited is a legal consultancy, not a law firm, and is not regulated by the New Zealand Law Society. We don't act in court or tribunal matters, conveyancing (including leases and business sales) or other reserved areas of work. Communications with Sprintlaw are unlikely to be protected by legal professional privilege. We still keep everything confidential under our engagement letter.