11.4 Business Ethics, Whistleblowing and Ethical Culture

Key Takeaways

  • Business ethics concerns organisational conduct; personal ethics concerns individual conduct — the two can conflict
  • The Public Interest Disclosure Act 1998 (PIDA) protects 'workers' who make 'qualifying disclosures' to prescribed persons
  • The Enterprise and Regulatory Reform Act 2013 widened the definition of protected disclosure to include disclosures made to the wider public in some cases
  • FCA Handbook SYSC 18 requires regulated firms to have internal whistleblowing procedures and a whistleblowers' champion
  • A strong ethical culture reduces conduct risk and improves consumer outcomes
Last updated: July 2026

Business Ethics, Whistleblowing and Ethical Culture

Ethics in financial services operates at two levels: the individual adviser and the firm. FRE2 LO8 AC8.3 expects you to understand the difference between business and personal ethics, the legal and regulatory framework for whistleblowing, and how an ethical culture in a firm shapes outcomes for consumers.

Business Ethics vs Personal Ethics

Personal ethics is the set of values and principles an individual lives by — honesty, courage, loyalty. Business ethics is the set of principles that govern how a firm conducts itself — its culture, its incentive structures, its willingness to escalate concerns. The two can diverge:

  • A personally honest employee may follow a firm's aggressive sales culture that is ethically poor.
  • A firm with strong ethical values may employ an individual whose personal conduct falls short.

The FCA's Consumer Duty and the Senior Managers and Certification Regime (SMCR) explicitly address this gap by holding senior managers personally accountable for the culture they create. Business ethics is therefore not just the sum of the personal ethics of employees; it is a property of the firm.

What Is Whistleblowing?

Whistleblowing is the act of disclosing wrongdoing, usually internally or to a regulator, by a worker who has reasonable grounds to believe the disclosure is in the public interest. The disclosure might concern:

  • criminal offences (including fraud and money laundering);
  • failures to comply with legal obligations;
  • miscarriages of justice;
  • health and safety dangers;
  • environmental damage;
  • deliberate concealment of any of the above.

Whistleblowing is distinct from a personal grievance (e.g., a complaint about pay), which is handled under separate employment law.

The Public Interest Disclosure Act 1998 (PIDA)

The Public Interest Disclosure Act 1998 (PIDA) amended the Employment Rights Act 1996 to protect workers (a wider category than employees) who make qualifying disclosures through prescribed channels. PIDA introduced the concept of a protected disclosure. A worker who is dismissed or subjected to detriment for making a protected disclosure can claim unfair dismissal and compensation at an Employment Tribunal.

Under PIDA, disclosures are protected if made to:

  • the worker's employer (internal procedure);
  • a prescribed person — a regulator or other body listed by the Secretary of State (the FCA and PRA are prescribed persons);
  • in narrow circumstances, to the wider public (e.g., journalists, MPs) where very serious conditions are met.

Enterprise and Regulatory Reform Act 2013

The Enterprise and Regulatory Reform Act 2013 strengthened the whistleblowing framework:

  • It widened the definition of worker to include certain contractors, agency workers and trainees.
  • It introduced a public interest test — the disclosure must, in the worker's reasonable belief, be in the public interest. (Prior to 2013, disclosures could be about matters of purely personal interest.)
  • It clarified that a disclosure is not protected if it is made for personal gain (e.g., payment from a newspaper).
  • It allowed regulators, including the FCA and PRA, to receive and act on disclosures from a wider set of individuals.

The FCA's Whistleblowing Rules — SYSC 18

The FCA Handbook's Senior Management Arrangements, Systems and Controls (SYSC) 18 sourcebook imposes detailed whistleblowing requirements on authorised firms. The rules, in force since September 2016, require firms to:

  • establish, implement and maintain appropriate and effective arrangements for whistleblowers to disclose reportable concerns (SYSC 18.3);
  • appoint a whistleblowers' champion — typically a non-executive director (SYSC 18.4);
  • ensure the whistleblowers' champion oversees the integrity, independence and effectiveness of the firm's whistleblowing arrangements;
  • ensure settlement agreements expressly state that workers may make protected disclosures and do not include warranties preventing them (SYSC 18.5);
  • communicate the firm's whistleblowing arrangements to all UK-based employees;
  • transfer the relevant arrangements to the firm's UK branches for overseas SMCR banking firms.

SYSC 18 also implements the MiFID II whistleblowing obligation (Article 73(2)) for MiFID investment firms.

Prescribed Persons

The Secretary of State maintains a list of prescribed persons who can receive protected disclosures. Key prescribed persons for financial services include:

Prescribed personMatters they can receive
FCAConduct of FCA-authorised firms
PRAPrudential matters of PRA-regulated firms
HMRCTax-related wrongdoing
Serious Fraud OfficeSerious or complex fraud
Information CommissionerData protection breaches

Disclosures to a prescribed person are protected if the worker has a reasonable belief both that the information tends to show one of the qualifying categories and that the prescribed person is responsible for that area.

Protected Disclosures: Summary

ElementRequirement
DiscloserA 'worker' (incl. contractors, trainees since 2013)
BeliefReasonable belief that the information tends to show wrongdoing
Public interestMade in the worker's reasonable belief in the public interest (post-2013)
ChannelInternal, prescribed person, or wider disclosure in narrow cases
Good faithNot required (post-2013), but bad faith can reduce compensation
Personal gainDisclosures made for personal gain are excluded

Ethical Culture in Firms

A firm's ethical culture is the shared set of values, norms and behaviours that shape how decisions are made when no one is checking. The FCA links culture to conduct risk through:

  • Tone from the top — leaders model ethical behaviour.
  • Incentives — pay and bonus structures do not reward mis-selling.
  • Speak-up arrangements — workers feel safe raising concerns.
  • Accountability — under SMCR, senior managers are personally accountable for culture.
  • Escalation — concerns are surfaced and acted on quickly.

Impact of Ethics on Consumer Outcomes

The FCA's own research (e.g., on the Consumer Duty and on TCF outcomes) finds that firms with stronger ethical cultures produce:

  • fewer mis-selling events;
  • fewer complaints to the Financial Ombudsman Service (FOS);
  • lower redress bills (and lower FSCS levies for the industry);
  • higher customer retention and trust.

Ethics, in other words, is not a cost — it is a consumer-outcome driver and a commercial benefit.

Worked Example: A Whistleblowing Scenario

Scenario: A compliance officer at an FCA-authorised firm discovers that the firm has been inflating its assets-under-management figures in regulatory returns. She raises the concern internally with her manager, who tells her to ignore it. She then discloses to the FCA.

Analysis:

  • Her internal disclosure is protected under PIDA.
  • Her disclosure to the FCA (a prescribed person) is protected because she has a reasonable belief both that the information shows wrongdoing and that the FCA is responsible for the matter.
  • Dismissing or deterring her would give rise to an unfair dismissal claim and a detriment claim.
  • The firm is also in breach of SYSC 18 for failing to act on the reportable concern.

Exam Tip

CeMAP AC8.3 questions often test whether you can identify a protected disclosure in a scenario, and whether the worker has used the right channel. Watch for answers that confuse whistleblowing with personal grievances, or that say the disclosure must be made in good faith (this requirement was removed in 2013).

Test Your Knowledge

Which Act, amended by later legislation, first introduced statutory protection for whistleblowers in the UK by inserting provisions into the Employment Rights Act 1996?

A
B
C
D
Test Your Knowledge

Under the FCA's whistleblowing rules in SYSC 18, what must authorised firms appoint to oversee the integrity, independence and effectiveness of whistleblowing arrangements?

A
B
C
D
Test Your Knowledge

Which change to UK whistleblowing law was introduced by the Enterprise and Regulatory Reform Act 2013?

A
B
C
D