Skip to content



Developments and reforms in whistleblowing laws in India

Considering the past few years that we have written about India, we will come back to the changes in the laws in this country again this year, please read this article first and then come back here to know the conditions of India in the past.

India must expand its legislative reach to encompass private sector entities. As the private sector significantly impacts both the livelihood and well-being of our nation's people, extending regulatory measures is long overdue. Many countries have already implemented such policies targeting private entities, providing India with ample models to draw inspiration from. By adapting these frameworks to suit its unique socio-economic and political landscape, India can effectively address its prevailing challenges.

 

Which companies must implement a whistleblowing procedure?

As of now, there are no dedicated laws addressing whistleblower protection for employees of private, unlisted companies, or unincorporated entities. Employers have the autonomy to create and implement their whistleblower policies, aimed at fostering a culture of reporting without fear of reprisal, discrimination, or any form of disadvantage, whether economic or otherwise. Consequently, within private establishments, the approach to whistleblowing largely relies on discretionary measures and internal policies.

As per the Companies Act, the following types of companies are required to establish a vigil mechanism and adopt a “whistleblower policy” for directors, employees, stakeholders, and any other individuals (such as auditors) to report concerns about unethical behaviour, actual or suspected fraud or violation of the company’s code of conduct or ethics policy:

  • listed companies;
  • companies that accept deposits from the public;
  • And companies that have borrowed money from banks and public financial institutions totalling more than 500 million Indian rupees.

 

Who is responsible for enforcing the Whistleblowing Legislation?

who is responsible for enforcing the wistleblowing legislation India

For companies, the authorities that are responsible for overseeing the enforcement of whistleblowing legislation depend on which of the following two categories the company falls under:

  • companies that are required to constitute an audit committee; 
    The companies that are statutorily required to constitute an audit committee are required to oversee the vigil mechanism through said committee.
  • other companies.

In the case of other companies, the Board of Directors is required to nominate a director to play the role of an audit committee for the vigil mechanism. The other directors and employees may report their concerns to such a director (Rule 7(3) of the Companies Rules).

The Chairman & Managing Director of the Company will include any person(s) to whom he may delegate any of his powers as the Competent Authority under this policy from time to time. In case the subject person is the Chairman & Managing Director, then the Chairman and Audit Committee will be the Competent Authority. 

 

As a matter of practice, companies protect the whistleblowers in the following manner:

  • keeping the identity of the whistleblower confidential;
  • ensuring that the whistleblower is not provided any unfair treatment; and
  • preventing retaliation, threat, or intimidation of termination/suspension of service, disciplinary action, transfer, demotion, refusal of promotion, or any other act that adversely affects the terms or conditions of the whistleblower's employment, etc.

 

Further, the protection available to whistleblowers under the WBP Act is as follows:

  • Safeguards against victimization (Section 11 of the WBP Act);
  • Protection of witnesses and other persons (Section 12 of the WBP Act);
  • Protection of the identity of the complainant (Section 13 of the WBP Act); and
  • Power to pass interim orders (Section 14 of the WBP Act).

 

The SEBI LODR Regulations

The SEBI LODR Regulations

The SEBI LODR Regulations establish guidelines for ensuring robust corporate governance and transparent disclosures among listed companies in India. As per Regulation 22(2) of these regulations, listed companies are required to establish a comprehensive vigil mechanism or whistleblower policy.

This mechanism enables stakeholders, including individual employees and their representative bodies, to report concerns regarding illegal or unethical practices without fear of reprisal.

Additionally, the vigil mechanism must include provisions to safeguard individuals, such as directors or employees, who utilize the mechanism from any form of victimization.

 

The SEBI LODR Regulations provide for certain conditions that should be adhered to by a listed entity while constituting a qualified and independent audit committee, which are as follows:

  • The audit committee must have a minimum of three directors as members;
  • At least two-thirds of the members of the audit committee must be independent directors and in case of a listed entity having outstanding superior voting rights equity shares ('SR equity shares') (SR equity shares mean the equity shares of an issuer having superior voting rights compared to all other equity shares issued by that issuer), the audit committee shall only comprise independent directors;
  • All members of the audit committee must be financially literate and at least one member must have accounting or related financial management expertise; and
  • The chairperson of the audit committee must be an independent director, and they must be present at the annual general meeting to answer the shareholder queries.

 

Penalties and Legal Recourse

Under the Companies Act, failure to adopt and implement a whistleblowing procedure, as outlined in the specific whistleblowing legislation section above, can result in penalties. The company may face a fine of INR 500,000 (approximately $6,009), while every responsible officer may be fined INR 100,000 (approximately $1,202) (Section 178(8) of the Act).

Section 16 of the WBP Act states that any individual who negligently or with malicious intent discloses the identity of a complainant can face imprisonment for up to three years and a fine of up to INR 50,000 (approximately $600).

 

Legal deficiencies

The efforts of whistleblowers have exposed numerous governmental deficiencies and wrongdoings. However, for a considerable period, India lacked statutory legislation providing these individuals with safe harbour and protection from powerful government entities.

Existing whistleblower laws suffer from significant limitations and narrow scope. Importantly, no laws promote whistleblowing or safeguard whistleblowers within private institutions. While various disclosure obligations exist for individuals and entities like banks and listed companies, aimed at detecting fraud and misconduct early on, India has yet to implement comprehensive laws to enhance whistleblower protection across all sectors of the economy.

Establishing secure channels or mechanisms that enable whistleblowers to report without fear of retaliation or victimization remains an unaddressed need.