This bill establishes a standalone Whistleblower Protection Authority headed by an independent Whistleblower Protection Commissioner and supported by up to two Deputy Commissioners, a CEO and an Advisory Council. The Authority is a listed entity for finance purposes and is charged with receiving disclosures of wrongdoing under a range of Commonwealth laws, providing advice and support to disclosers, monitoring agency responses and conducting investigations and public inquiries into reprisals or failures to protect whistleblowers.
The measure centralises oversight of whistleblower protection across multiple statutes, gives the Commissioner a package of remedial and enforcement tools (including reporting, recommendations, mediation, enforceable undertakings and court proceedings), and creates reporting and parliamentary oversight obligations. That combination is intended to raise practical protections for people who disclose wrongdoing while creating new compliance and resourcing expectations for agencies and other bodies that handle disclosures.
At a Glance
What It Does
Creates an independent Whistleblower Protection Commissioner and Authority that can receive disclosures, refer matters to relevant agencies, monitor and manage investigations, conduct public inquiries into reprisal, and provide legal and practical support to eligible disclosers.
Who It Affects
Commonwealth agencies and their heads, public officials, current and former employees/contractors/volunteers who make disclosures under covered Commonwealth laws, regulators that already handle disclosures (for example ASIC and the National Anti‑Corruption Commission), and legal or support providers who assist disclosers.
Why It Matters
It centralises whistleblower intake and oversight, gives a single body authority to assess and escalate protection issues across statutes, and provides a formal enforcement and remedial pathway that can include court action, compensation and enforceable undertakings — shifting how agencies will need to manage and report on disclosure-related risks.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The Act defines a broad class of protected disclosures — including public interest disclosures under the Public Interest Disclosure Act, certain Corporations Act disclosures, NACC referrals and disclosures under a list of specified Commonwealth laws — and makes those disclosures eligible for handling by the new Authority. A person may make a disclosure or request advice to the Commissioner orally, in writing or anonymously; the Commissioner can require an oral disclosure to be put in writing and may pause handling until it is.
Public officials have an immediate duty to refer whistleblower protection issues to the Commissioner or to notify their agency head. The Commissioner can agree with, issue guidance to, or set directions with the heads of Commonwealth agencies about how referrals should be made and what level of detail is required.
When a disclosure or protection issue is before the Authority, the Commissioner may refer it back to an agency, monitor the agency’s investigation, manage or oversee the investigation, or investigate it directly; the Commissioner may also decide to take no further action in limited circumstances.To do investigations and public inquiries, the Act applies key investigative provisions of the National Anti‑Corruption Commission Act (Parts 7–9) to the Whistleblower Protection Commissioner, meaning the Commissioner will exercise significant inquiry and evidence‑gathering powers when authorised matters fall within that remit. The Commissioner can make remedial recommendations, seek compensation or reinstatement remedies, provide or arrange legal representation and practical support (including payments for non‑legal costs), mediate or arbitrate disputes with party consent, accept enforceable undertakings, and initiate court or tribunal proceedings where it is in the public interest.Operationally, the Authority is staffed under the Public Service Act and led by a full‑time Commissioner with up to two Deputies; appointment steps require referral to the Parliamentary Joint Committee established by the Act.
Staff and persons assisting the Authority receive immunities for acts done in good faith in the course of the Authority’s work. The Commissioner must produce an annual report with prescribed particulars, with sensitive material excluded, and the Minister may make rules (subject to explicit limits) to implement the Act.
The Five Things You Need to Know
A person may make a disclosure or request to the Commissioner anonymously, but the Commissioner can require oral disclosures to be put in writing and may refuse to proceed until they are written.
Public officials must, as soon as practicable, refer any allegation or information that raises a whistleblower protection issue to the Commissioner or notify their agency head.
The Commissioner may direct a head of a Commonwealth agency not to investigate a referred whistleblower protection issue; any written direction of that kind is explicitly not a legislative instrument.
Parts 7–9 of the National Anti‑Corruption Commission Act are applied to the Commissioner for investigations and public inquiries, importing the NACC’s investigative and evidence‑gathering framework into the Authority’s powers.
The Commissioner can provide or arrange legal representation and other practical support for disclosers — including payments for non‑legal costs and rewards — and may establish a scheme for that support.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Creates the Commissioner, Deputies and the Authority
The Act designates an independent Whistleblower Protection Commissioner and up to two Deputy Commissioners, establishes the Authority as a listed finance entity, and makes the CEO the accountable authority. The Commissioner is explicitly an independent officer of Parliament; the statute disclaims any implied additional powers from that status and confines the Commissioner’s functions to those the Act specifies.
Intake, confidentiality, and engagement with agencies
The Authority is the statutory intake point for disclosures and requests for advice. The Commissioner must ask electors whether they want to be kept informed; anonymous and third‑party referrals are permitted; and the Commissioner can require a written record. The Commissioner must consult with a list of oversight and regulatory bodies when developing guidance and must ensure staff have specialist training to provide legal, psychological and workplace advice.
How matters are handled: referral, monitoring, investigation and decision criteria
The Commissioner has a flexible case‑management toolbox: refer disclosures to agencies, monitor or oversee those investigations, manage investigations conducted by agencies, or investigate directly. The Act sets out factors the Commissioner must consider when deciding how to proceed — including the need to protect identities, agency responsibilities, resource constraints and significance — and permits the Commissioner to deal with multiple related protection issues together. The Commissioner may act on referrals or on the Commissioner’s own initiative, and may require agency heads to provide information or documents relevant to the matter.
Remedies, enforcement and dispute resolution
Reports and inquiries can include recommendations to remedy systemic weaknesses, compensation, reinstatement, or other actions. The Commissioner may commence proceedings in court or tribunals in the public interest, provide legal representation or practical support to disclosers (and set up a scheme to do so), mediate or arbitrate disputes with party consent, and accept enforceable undertakings and seek court enforcement if undertakings are breached.
Appointment, staffing, immunities and administrative arrangements
Appointments follow a three‑step chain: Minister proposes, the Parliamentary Joint Committee must approve the recommendation, and the Governor‑General makes the appointment. Commissioners are full‑time with fixed maximum terms; Deputies may be part‑ or full‑time and must bring specified expertise. Staff are APS employees; consultants and seconded officers are permitted. Staff and assisting persons have statutory civil‑liability immunities for good‑faith acts in performance of Authority functions.
Advisory Council to provide strategic, non‑case advice
The Whistleblower Protection Advisory Council provides strategy and system‑level advice to the Commissioner and, at the Minister’s request, to the Minister. Membership is part‑time, capped, must include at least one former whistleblower and people with specified expertise, and the Minister may give written directions to the Council about procedure or how to carry out its functions.
Parliamentary oversight, reporting, confidentiality and rule‑making limits
A Parliamentary Joint Committee is created to vet appointment recommendations and monitor performance; the Commissioner must produce an annual report containing prescribed particulars, and sensitive information may be excluded. The Minister can make rules by legislative instrument to implement the Act, subject to express limits (rules cannot create offences or civil penalties, cannot provide arrest/search powers, impose taxes or amend the Act directly).
This bill is one of many.
Codify tracks hundreds of bills on Government across all five countries.
Explore Government in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Current and former employees, contractors and volunteers who disclose wrongdoing — they gain a central, independent intake and an Authority that can monitor protections, provide legal and non‑legal practical support, recommend compensation or reinstatement and pursue remedies on their behalf.
- Civil society and whistleblower advocacy organisations — the Authority requires consultation with representative bodies and includes lived‑experience representation on the Advisory Council, giving these groups a formal channel to influence guidance and standards.
- Parliament and the public — the Commissioner’s reporting and public inquiries create a single public record about systemic protection failures and reforms, improving oversight of whistleblower protections across multiple Commonwealth laws.
Who Bears the Cost
- Commonwealth agencies and their heads — they must refer protection issues, comply with information requests, negotiate or accept Commissioner guidance and may be subject to oversight, directions or managed investigations that consume staff time and resources.
- The Commonwealth budget (taxpayers) — the Authority is funded by appropriations, and practical support schemes, legal representation and compensation recommended by the Commissioner may create additional expenditure pressures.
- Employers and entities subject to recommendations — agencies, corporations and other bodies may face remedial obligations, enforcement actions, compensation orders or reputational consequences when the Commissioner reports systemic failures.
Key Issues
The Core Tension
The central tension is between establishing a powerful, independent central authority to protect whistleblowers and preserving agency autonomy and existing investigative responsibilities: strong central oversight can improve protections and consistency, but it risks duplication, jurisdictional conflict and heavy resource demands on both the Authority and the agencies it oversees.
The Act centralises intake and oversight while deliberately preserving existing agency responsibilities; that creates practical friction. Heads of agencies remain primary managers of many investigations, yet the Commissioner can step in, direct that an agency not investigate, or manage/oversee an agency’s investigation.
Those overlapping authorities will require careful operational protocols, or the result will be duplicated effort, uncertainty about mandates and potential legal disputes over scope.
The statute borrows investigative mechanics from the NACC framework, which expands the Commissioner’s inquiry powers but also raises capacity and legal‑process questions. Importing Parts 7–9 of the NACC Act can trigger resource‑intensive evidence‑gathering, and the Commissioner will need clear internal thresholds to decide when to use coercive or compulsory mechanisms.
Confidentiality rules protect sensitive material, but the Act also contemplates public reports; balancing discloser privacy against public accountability will be a recurring implementation challenge.
Finally, the Act gives the Minister rule‑making power but constrains it (rules cannot create offences, impose taxes or confer arrest/search powers). That preserves Parliament’s role in creating offences or penalties but means the Commissioner’s ability to enforce compliance depends on civil remedies, undertakings and public pressure rather than new statutory criminal offences — a trade‑off that may limit deterrence in some settings.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.