Whistleblowing in Care: The Law, and the Policy Staff Will Use

Whistleblowing is a worker raising a concern about wrongdoing or risk that affects other people. In care, that usually means a risk to the people you support. The law protects the worker who raises it. Most services have a policy for this. Far fewer have one their staff would reach for at 2am.

What follows is what the law protects, where CQC fits, and what your policy needs to say.

What whistleblowing law protects

Protection covers workers, not just employees. That includes trainees, agency workers and members of a limited liability partnership. In a care service, an agency care worker on a first shift is protected.

A disclosure qualifies when the worker reasonably believes it is in the public interest and it shows one of these:

• A criminal offence, for example fraud

• Someone's health and safety is in danger

• Risk of, or actual, damage to the environment

• A miscarriage of justice

• The company is breaking the law

• Someone is covering up wrongdoing

The public interest test matters. The wrongdoing must affect others, for example the general public, rather than only the person raising it.

The protection itself is simple to state. A whistleblower should not be treated unfairly or lose their job because they blew the whistle.

A concern is not a grievance

This is the distinction that causes the most trouble in care services.

Personal grievances, for example bullying or a dispute about your own terms, are not covered by whistleblowing law, unless the particular case is in the public interest. Those go through the grievance policy.

A concern about the care of a resident goes through whistleblowing. Put both routes in both policies, with one line telling staff which is which. Staff should never have to choose correctly before they are allowed to speak.

Where CQC fits

A worker can raise a concern with their employer, with a lawyer, or with a prescribed person.

CQC is a prescribed person, set out in the Public Interest Disclosure (Prescribed Persons) Order 2014. That means a care worker can go straight to CQC and keep their legal protection, without telling you first.

Two things follow for a registered manager. Your staff have a lawful route that bypasses you, so a policy that implies they must come to you first is wrong. And CQC reports publicly on what it receives: in 2023/24 it processed 20,901 cases from workers speaking up, of which 15,919 were treated as qualifying disclosures.

Speaking up also sits inside CQC's well-led assessment. Inspectors look for a culture where staff raise concerns and the people who do are supported, without fear of detriment.

What your speaking up policy must say

A policy nobody uses becomes a governance risk in its own right. Make yours answer these:

1. Who is covered. Say plainly that agency and bank workers, volunteers and trainees are included.

2. What to raise. The six categories above, translated into care examples: unsafe staffing, medication covered up, rough handling, a falsified record.

3. Three named routes. A manager, a second person who is not that manager, and CQC. Give the CQC contact details in the policy itself.

4. Say the bypass is allowed. State that a worker may go to CQC without telling the service first, and keeps their protection.

5. The grievance split. One line on the difference, and where each goes.

6. What happens next. Who acknowledges, in what time, who investigates, and what the worker is told at the end.

7. Confidentiality, honestly. Say what you can protect and what you cannot, rather than promising anonymity you cannot deliver.

8. No detriment. State the protection without hedging, and name the person who checks the worker is alright weeks later.

9. The board line. Where speaking up is reported to the people running the service, and how often.

Our guide to care home policies and procedures covers the structure every policy needs. Where a concern is about abuse, a CQC statutory notification may follow, and the two duties run alongside each other.

The test of a speaking up policy

Ask a care worker three questions on a normal shift. Who would you tell? What if it was about that person? What happens to you afterwards?

If they answer all three without checking the folder, the policy works. If they hesitate on the second, your policy has only one route, and that is the most common gap in care.

Where HeroDocs fits

HeroDocs keeps your whistleblowing policy in one place, with its owner, version and review date. You can send it to your team for sign-off, including agency staff, and keep the timestamped record that shows who has read it. After an incident, that record is what an inspector asks for first.

Sources

• GOV.UK, Whistleblowing for employees.

• GOV.UK, Whistleblowing: list of prescribed people and bodies.

• CQC, Whistleblowing guidance for providers registered with CQC.

• CQC, Prescribed persons report 2023/24.

• CQC, Freedom to speak up, part of the well-led assessment.

Last checked: 26 September 2026.

---