Whistleblower Protection: What Counts, What Retaliation Looks Like and the Filing Deadlines

The deadline is where most people lose their rights. Some US complaints must be filed within 30 days of the adverse action being communicated to you, which is less time than many people take to decide whether to complain at all.

United States: OSHA's deadlines by law

Deadline	Examples of laws OSHA lists
30 days	Section 11(c) of the OSH Act (workplace safety), Clean Air Act, Safe Drinking Water Act, Toxic Substances Control Act
60 days	International Safe Container Act
90 days	Asbestos Hazard Emergency Response Act, AIR21 (aviation)
180 days	Sarbanes-Oxley (public companies), Affordable Care Act, Consumer Financial Protection Act, Consumer Product Safety Improvement Act, Surface Transportation Assistance Act, Taxpayer First Act

OSHA says the clock starts when the adverse action, such as a firing, happens and is communicated to the employee. You can file online, which OSHA calls its preferred method, or by fax, mail or email to a local office. In states with an OSHA-approved State Plan, online complaints are forwarded to the state.

What retaliation looks like

OSHA defines an adverse action as anything that would dissuade a reasonable employee from raising a concern. Its list goes well beyond firing:

• Firing, laying off or demoting.
• Denying overtime, promotion or benefits.
• Discipline, intimidation, harassment or threats.
• Reassignment to a worse role, or being left out of training and meetings.
• Cutting pay or hours.
• Isolating, mocking or falsely accusing someone of poor performance.
• Blacklisting, or reporting or threatening to report someone to the police or immigration authorities.
• Constructive discharge: making conditions so bad the person quits.

One OSHA example is a worker who reported a fire hazard and was then refused a routine shift swap that every employee could normally make. Small, petty changes after a complaint count. OSHA also notes that when a staffing agency supplies temporary workers, both the agency and the host employer can be held responsible for retaliation.

United Kingdom: what counts as whistleblowing

GOV.UK says you're a whistleblower if you're a worker who reports certain wrongdoing, and the disclosure must be in the public interest. Protected disclosures include:

• A criminal offence, such as fraud.
• Someone's health and safety being in danger.
• Risk or damage to the environment.
• A miscarriage of justice.
• The company breaking the law.
• Someone covering up wrongdoing.
• Sexual harassment.

Personal grievances aren't covered unless the case is in the public interest. Protection covers employees, trainees, agency workers and LLP members. You can report to your employer, a lawyer, or a prescribed person or body that deals with the issue, but GOV.UK warns that going to the media will, in most cases, cost you your whistleblowing rights.

Gagging clauses don't block a protected disclosure

GOV.UK is clear that confidentiality clauses in an employment contract or settlement agreement aren't valid if they try to stop a worker making a whistleblowing disclosure. Our guides to non-disclosure agreements and settlement agreements explain what those clauses can still lawfully cover.

The new UK time limit

Here's the change most UK articles haven't caught up with. GOV.UK says you usually have to raise an unfair dismissal claim within 6 months of your employment ending, but if your employment ended before 1 October 2026, you may need to claim within 3 months. Our unfair dismissal guide covers the wider rules.

For employers: a speak-up process that holds up

OSHA publishes guidance on creating an effective anti-retaliation program, and the logic is simple: problems you hear about early are cheaper than problems a regulator hears about first. A small business doesn't need a hotline to get this right.

1. Write a short policy saying how to raise a concern and who'll handle it, with a second route if the concern is about that person.
2. Tell managers that changes to someone's pay, shifts or duties soon after a complaint will be checked, and why.
3. Log every concern, the date and what you did about it.
4. Keep the reporter's identity as confidential as you can; GOV.UK says the person or body told should make every effort to protect it.
5. Close the loop: tell the person what happened, even if you can't share every detail.

How to protect yourself before you report

1. Write down what you saw, when and who was involved, as you go.
2. Check which law covers it, because that decides the deadline in the US.
3. Report to the right place: your employer's policy, the regulator or a prescribed body.
4. Keep copies of what you sent and any reply.
5. If things change for the worse afterwards, note the dates and file quickly.

The verdict

Whistleblower laws protect you, but only if you act within their windows and report through the right channel. The two mistakes that sink most claims are waiting too long and going public first. Keep a dated record, report to someone who can act, and if anything changes for the worse after you speak up, treat the shortest possible deadline as yours.

Agreements that limit what you can say have limits of their own: see how non-disparagement clauses work.

Frequently asked questions

What is whistleblower protection?

Legal protection that stops an employer firing or punishing a worker for reporting certain wrongdoing, such as safety hazards, fraud or law-breaking.

How long do you get to file a whistleblower complaint with OSHA?

It depends on the law involved: 30, 60, 90 or 180 days from when the adverse action happened and was communicated to you.

Can an NDA stop me whistleblowing in the UK?

No. GOV.UK says confidentiality clauses aren't valid if they try to prevent a worker making a protected whistleblowing disclosure.

Do I lose protection if I go to the media?

In the UK, GOV.UK says reporting your concern to the media will, in most cases, mean you lose your whistleblowing law rights.

What counts as retaliation against a whistleblower?

OSHA says it's any adverse action that would dissuade a reasonable employee from raising a concern. That includes firing and demotion, but also cutting hours, isolating or mocking someone, falsely accusing them of poor performance, blacklisting, and threats to report them to the police or immigration authorities.

Can I report anonymously?

In the UK you can tell your employer or a prescribed person anonymously, but GOV.UK warns they may not be able to take it further without enough information, and it may be harder to prove later that unfair treatment was linked to your report.