21 Whistle-Blowing Under Organisational Pressure

Learning Objectives

You will be able to:

Define whistle-blowing and distinguish internal from external disclosure.
State the conditions under which whistle-blowing is justified, and those under which it becomes obligatory.
Explain the organisational pressures that keep people silent, and how they operate.
Describe the Indian framework requiring a vigil mechanism and protecting those who use it.
Analyse a disclosure situation from the perspectives of the individual and the organisation, and evaluate the options open to each.

21.1 Introduction

Chapter 15 described how large organisations diffuse responsibility until nobody feels answerable for what everyone can see. Chapter 20 described the conflicts that individuals carry into decisions. This chapter is about the person who notices something wrong and has to decide what to do about it.

Whistle-blowing is the disclosure by a member of an organisation of illegal, immoral or otherwise improper conduct under the control of that organisation, to a person or body in a position to act on it (Manuel G. Velasquez, 2018). Three features of the definition matter. The discloser is an insider, which is what makes the information valuable and the act costly. The conduct is under the organisation’s control, which distinguishes it from complaint about the world in general. And the disclosure is directed at someone who can act, which distinguishes it from grievance, gossip and resignation.

The subject is difficult to teach honestly because the two truths about it sit uncomfortably together. Whistle-blowers have prevented very serious harm, and organisations depend on them. And the individual cost has often been severe, borne by the person least able to bear it. A course that presents disclosure as a simple duty misdescribes the situation the student will actually face.

flowchart TD
    A["<b>An employee observes<br>serious wrongdoing</b>"] --> B{"Raise with immediate<br>superior?"}
    B -->|"Superior acts"| C["<b>Resolved</b>"]
    B -->|"Superior is the problem,<br>or does not act"| D{"Is there a vigil<br>mechanism reaching<br>the audit committee?"}
    D -->|"Yes, and it is trusted"| E["<b>Internal disclosure</b>"]
    D -->|"No, or it is not trusted"| F{"Serious harm,<br>evidence,<br>channels exhausted?"}
    E -->|"Not acted upon"| F
    F -->|"Yes"| G["<b>External disclosure</b><br>regulator, court,<br>last resort the public"]
    F -->|"No"| H["<b>Reconsider</b><br>evidence and gravity"]
    style A fill:#e3f2fd,stroke:#1976D2
    style C fill:#e8f5e9,stroke:#388E3C
    style G fill:#fff8e1,stroke:#F9A825

21.2 Internal and External Disclosure

Internal whistle-blowing goes up or across the organisation: to a superior, to a compliance function, to an audit committee, through a formal mechanism. External whistle-blowing goes outside: to a regulator, an auditor, a court, a journalist, or the public.

The distinction is not merely procedural. Internal disclosure preserves the organisation’s chance to correct itself, keeps the information confined, and is far less damaging to the discloser. External disclosure is what makes an organisation’s failure to correct itself visible, and it is also where the individual costs concentrate.

The proper sequence is internal first, and the reason is not loyalty. It is that internal disclosure is the only route that allows the organisation to fix the problem while it is still small, and a discloser who has not tried it cannot show that external escalation was necessary. The sequence has an important exception: where the internal route runs through the person responsible, or where using it would allow evidence to be destroyed, or where delay would allow serious harm to occur, the requirement to exhaust internal channels falls away.

21.3 When Is Disclosure Justified

Ethical analysis of whistle-blowing usually turns on a set of conditions. The first three are generally treated as making disclosure permissible; adding the last two is generally treated as making it obligatory (Manuel G. Velasquez, 2018).

The Conditions

Condition	What it requires
Serious harm	The conduct will do serious and considerable harm to the public, to employees, or to third parties. Ordinary policy disagreement does not qualify
Report to a superior	The employee has reported the matter to their immediate superior and made their moral concern known, unless doing so is futile or dangerous
Exhaust internal channels	Available internal avenues have been used, unless they are compromised or the delay would be harmful
Documentary evidence	The employee has evidence that would convince a reasonable, impartial observer, rather than a suspicion or an inference
Reasonable belief of success	There is good reason to believe that disclosure will actually prevent or correct the harm, at a cost proportionate to what is at stake

The last condition is contested, and worth pausing on. It asks the discloser to weigh probable effectiveness before acting, which some argue improperly makes a duty depend on likely success. The counter-argument is that whistle-blowing imposes real costs on the discloser, on colleagues and on an organisation that may be largely innocent, and that imposing those costs with no prospect of preventing the harm is hard to justify. Both positions are defensible, and a student should be able to argue either.

21.4 Why People Stay Silent

It is comfortable to assume that people who fail to speak up lack courage. The organisational research and the case record suggest something more structural, and understanding it is what allows a manager to design against it.

The Pressures That Produce Silence

Pressure	How it operates
Diffusion of responsibility	Where many people can see a problem, each assumes another will act, and none does
Ambiguity of evidence	Early signals are almost always incomplete, and the person who raises a concern that turns out to be nothing pays a price nobody records
Authority	An instruction from a superior converts a moral question into a compliance question, which is a different and easier one
Group loyalty	Disclosure is experienced by colleagues as betrayal of the team, which is a real social cost paid immediately
Incrementalism	Each step is only slightly worse than the last, so no single moment presents itself as the one to object to
Fear of retaliation	Usually well founded. Retaliation is rarely dismissal; it is exclusion, reassignment, a changed appraisal, and a reputation for being difficult
Absence of a route	Where the only channel runs through the person concerned, silence is not a failure of courage but an accurate reading of the options

Practitioner Insight: Design for the Ninety Per Cent Who Are Not Heroes

A mechanism that works only for exceptionally brave people has failed, because most serious wrongdoing is visible to ordinary people first. The design question is not how to encourage heroism but how to lower the cost of speaking to the point where an ordinary person will pay it.

Four features do most of that work. A route that does not pass through line management, so that raising a concern about a superior does not require their permission. Genuine anonymity as an option, with the honest caveat that anonymity limits what can be investigated. A response within a stated time, since silence after a disclosure teaches everyone watching what the mechanism is worth. And visible consequences for retaliation, because the organisation’s stated policy is believed only to the extent that people have seen it enforced.

The fifth feature is the hardest and the most diagnostic. Somebody senior must have raised a concern, and been thanked for it publicly. Until that has happened, employees are reasoning from the evidence available to them, and the evidence says stay quiet.

21.5 The Indian Framework

India requires a mechanism rather than relying on individual courage, and the obligation sits in three places.

The Companies Act requires prescribed classes of company, including every listed company, to establish a vigil mechanism for directors and employees to report genuine concerns (Government of India, 2013a). The mechanism must provide adequate safeguards against victimisation and must allow direct access to the chairperson of the audit committee in appropriate cases. That direct access provision is the important one, because it is the statutory answer to the problem of a channel running through the person concerned.

SEBI’s listing obligations require the vigil mechanism for listed entities and place its oversight with the audit committee (Securities and Exchange Board of India, 2015). Chapter 26 examines that committee’s role and Chapter 27 the listing framework.

The Whistle Blowers Protection Act provides a route and protection in relation to public servants (Government of India, 2014). Its coverage is of the public sector rather than of private employment, which is why the Companies Act mechanism carries the weight for most business students.

Separately, the framework for workplace sexual harassment operates under its own statute with its own internal committee, timelines and protections (Government of India, 2013b), and it should not be folded into a general whistle-blowing channel. Chapter 41 returns to the design of both.

Common Misconception: We Have a Hotline, So We Have a Mechanism

A telephone number and an email address are not a mechanism. What makes one function is the parts that are invisible from outside: who receives the report and whether they are independent of the operating line, what triage determines which concerns are investigated, who investigates and with what authority, what happens if the person implicated is senior to the investigator, what the discloser is told and when, and who reviews the pattern of reports over time.

The single most revealing question to ask about any organisation’s arrangements is how many reports it received last year and what happened to each. A mechanism receiving no reports is not evidence of a clean organisation. It is evidence that people are not using it, and the reason is almost never that there was nothing to say.

21.6 Case Studies

21.6.1 Case Study 1: The Test Result That Was Adjusted

The following situation is constructed rather than reported.

A junior quality analyst at a pharmaceutical unit finds that a batch has failed a dissolution test. Her supervisor instructs her to re-run the test on a fresh sample and record only the second result, saying that the first run had a known equipment issue. She is aware this has happened before. The batch is destined for a regulated export market. She has the original printout. Her supervisor reports to the plant head, who is under pressure on a shipment deadline. There is a vigil mechanism, publicised on a poster; nobody she knows has used it.

Discussion questions

Apply the five conditions. Which are satisfied, which are not, and what would she need to do to satisfy the ones that are not?
Identify which of the seven pressures are operating on her, and rank them by force.
Advise her on a sequence of steps, in order, with what she should document at each. Then state what the organisation should have done to make her decision easier.

21.6.2 Case Study 2: The Concern That Was Investigated by Its Subject

The following situation is constructed rather than reported.

A finance manager reports through the company’s ethics email address that a business head is approving payments to a vendor whose invoices lack supporting documentation. The email address is monitored by the compliance officer, who reports to the chief financial officer. The chief financial officer asks the business head to explain. The business head provides an explanation, the matter is closed, and the finance manager is told the concern was reviewed and found to be without substance. Four months later she is moved to a role with no reporting line to the board and no team.

Discussion questions

Identify every structural failure in this sequence, and say which statutory provision addresses each.
Was the outcome retaliation? What evidence would establish it, and why is that evidence usually hard to obtain?
What should she do now, and what are her realistic options in order of cost to her?

21.6.3 Case Study 3: The Escalation That Went Outside

The following situation is constructed rather than reported.

An engineer at an infrastructure company discovers that structural test certificates for a completed bridge appear to have been signed by a person who was not present. He raises it with his manager, then with the head of quality, then through the vigil mechanism. Each time he is told the matter is under review. Eight months pass. The bridge is in public use. He compiles his file and sends it to the state regulator and, at the same time, to a national newspaper.

Discussion questions

Assess the justification for external disclosure against the five conditions.
He went to the regulator and the press simultaneously. Evaluate that choice. What would have been gained or lost by approaching the regulator alone first?
Apply the three frameworks from Chapters 16 to 18 to his decision. Where do they agree and where do they part?

21.7 Applying the Chapter

Exercise: Two Analyses of One Disclosure

An operations manager at a food processing company discovers that a supervisor has been recording cold chain temperatures manually when the automated logger fails, and entering values within range rather than the actual readings. The practice appears to have run for several months across three shifts. Product has shipped. No illness has been reported. The plant head is aware and has said the logger will be replaced next quarter. The company has a vigil mechanism reporting to a compliance officer, who reports to the chief operating officer, who is the plant head’s superior and is under pressure on plant profitability.

Working in a group, produce two analyses.

Part A: the individual’s position.

Apply the five conditions and state whether disclosure is permissible, obligatory or neither, with your reasoning on each condition.
Identify the pressures operating on the operations manager, and on the supervisor who made the entries, and say how they differ.
Evaluate the options through the three frameworks. Set out at least four options, including two that are neither silence nor external disclosure, and state what each framework says about each.
Recommend a sequence of steps with what to document at each, and identify the point at which external escalation would become justified.

Part B: the organisation’s position.

Diagnose the mechanism. Identify every structural weakness in the reporting line described, and state what the Companies Act requires that this arrangement does not deliver.
Redesign it. Specify who receives reports, who investigates, what happens when the subject is senior, what the discloser is told and when, and who reviews the pattern. Name the board committee that should own it.
Evaluate the culture. State three pieces of evidence you would seek to determine whether employees actually believe the mechanism is safe to use, and what each would tell you.

Present Part A as a decision note from the operations manager’s perspective and Part B as a memorandum to the audit committee. Both must reach a conclusion.

21.8 Summary

Chapter Summary

Whistle-blowing is disclosure by an organisational insider of improper conduct under the organisation’s control, to someone able to act on it (Manuel G. Velasquez, 2018). The insider status makes the information valuable and the act costly, and the subject must be taught with both truths held together: disclosure has prevented serious harm, and the cost has frequently fallen hardest on the person least able to bear it.

Internal disclosure preserves the organisation’s chance to correct itself and costs the discloser far less; external disclosure makes a failure to correct visible and concentrates the individual cost. Internal first is the proper sequence, not out of loyalty but because it is the only route that fixes a problem while it is small, and because a discloser who has not tried it cannot show escalation was necessary. The requirement lapses where the internal route runs through the person responsible, where evidence would be destroyed, or where delay would allow serious harm.

Five conditions structure the ethical analysis: serious harm, report to a superior, exhaustion of internal channels, documentary evidence convincing to an impartial observer, and reasonable belief that disclosure will actually correct the harm. The first three are generally treated as making disclosure permissible and the last two as making it obligatory, and the fifth is genuinely contested.

Silence is usually structural rather than cowardly. Diffusion of responsibility, ambiguous early evidence, authority converting a moral question into a compliance one, group loyalty, incrementalism, well-founded fear of retaliation that takes the form of exclusion rather than dismissal, and the simple absence of a route all operate. A mechanism that works only for exceptionally brave people has failed, so design must lower the cost of speaking: a route bypassing line management, real anonymity as an option, a response within a stated time, visible consequences for retaliation, and someone senior having raised a concern and been thanked publicly.

India requires a vigil mechanism for prescribed companies, with safeguards against victimisation and direct access to the audit committee chairperson (Government of India, 2013a), reinforced for listed entities through the listing obligations (Securities and Exchange Board of India, 2015), with separate statutes covering public servants (Government of India, 2014) and workplace sexual harassment (Government of India, 2013b). A hotline is not a mechanism; what matters is who receives, who investigates, what happens when the subject is senior, what the discloser is told, and who reviews the pattern. A mechanism receiving no reports is evidence that nobody trusts it.

Key Terms

Whistle-blowing · Insider disclosure · Internal disclosure · External disclosure · Exhaustion of internal channels · Serious harm condition · Documentary evidence · Reasonable belief of success · Permissible and obligatory · Diffusion of responsibility · Ambiguity of early evidence · Authority · Group loyalty · Incrementalism · Retaliation · Absence of a route · Vigil mechanism · Direct access to the audit committee · Protection against victimisation · Anonymity and its limits · Response within a stated time · Pattern review

Summary

Concept	Description
What It Is
Whistle-blowing	Disclosure by an organisational member of improper conduct, to a person or body able to act on it
Insider status	The feature that makes the information valuable and the act costly to the person making it
Conduct under organisational control	The limit distinguishing whistle-blowing from complaint about the world in general
Someone able to act	The requirement distinguishing disclosure from grievance, gossip and resignation
Internal and External
Internal disclosure	Disclosure up or across the organisation, which preserves its chance to correct itself
External disclosure	Disclosure to a regulator, court, journalist or the public, where individual costs concentrate
Internal first	The proper sequence, justified by effectiveness rather than by loyalty
When the sequence lapses	Where the route runs through the wrongdoer, evidence would be destroyed, or delay would cause harm
When It Is Justified
Serious harm condition	The requirement that the conduct threaten serious and considerable harm, not mere policy disagreement
Report to a superior	Raising the matter with the immediate superior and making the moral concern known
Exhaustion of channels	Using available internal avenues unless they are compromised or delay would be harmful
Documentary evidence	Evidence that would convince a reasonable impartial observer, rather than suspicion or inference
Reasonable belief of success	The contested condition asking whether disclosure will actually prevent or correct the harm
Permissible and obligatory	The division by which the first three conditions permit and the last two oblige
Why People Stay Silent
Diffusion of responsibility	The pressure by which each observer assumes another will act, so none does
Ambiguity of early evidence	The pressure created because early signals are incomplete and false alarms carry an unrecorded cost
Authority	The pressure converting a moral question into the easier question of whether to comply
Group loyalty	The immediate social cost of being experienced by colleagues as betraying the team
Incrementalism	The pressure by which no single step is bad enough to be the one worth objecting to
Retaliation	Usually exclusion, reassignment, a changed appraisal and a reputation, rather than dismissal
Absence of a route	The condition under which silence is an accurate reading of the options rather than a failure of nerve
Designing a Mechanism
Designing for ordinary people	The design principle that a mechanism requiring heroism has already failed
Bypassing line management	The feature allowing a concern about a superior to be raised without that superior's permission
Anonymity and its limits	The option that lowers cost while honestly limiting what can be investigated
Response within a stated time	The commitment without which silence after a report teaches everyone what the mechanism is worth
Visible consequences for retaliation	The enforcement that makes a non-retaliation policy believable
The senior example	The most diagnostic feature: someone senior having raised a concern and been thanked publicly
The Indian Framework
Vigil mechanism	The statutory channel prescribed companies must establish for directors and employees
Direct access to the audit committee	The statutory answer to a channel that would otherwise run through the person concerned
Protection against victimisation	The safeguard the mechanism must provide for those who use it
A hotline is not a mechanism	The point that the visible parts matter less than triage, investigation, feedback and pattern review
Zero reports	Evidence that the mechanism is not trusted, rather than that there was nothing to report