Codify — Article

California bill broadens whistleblower protections and creates per-employee penalties

AB 2027 bars employer rules that block disclosures, forbids retaliation (including against family members), and authorizes up to $10,000 per-employee penalties with Labor Commissioner review.

The Brief

AB 2027 makes it unlawful for employers or agents to adopt or enforce policies that prevent employees from reporting suspected violations of law to authorities, supervisors, coworkers with investigative authority, or public bodies. The measure separately outlaws retaliation for making such disclosures, for refusing to participate in unlawful activity, and for exercising these rights after leaving employment.

The bill adds a financial stick: a civil penalty of up to $10,000 per employee per violation that the Labor Commissioner may award to a retaliated-against employee, and it authorizes courts to award attorney’s fees. It also carves out confidentiality privileges and trade secrets, protects relatives of whistleblowers, and explicitly includes certain client employers in the statute’s reach—shaping who can be held responsible and how claims will be enforced.

At a Glance

What It Does

Prohibits employer rules that block disclosures of suspected legal violations and forbids retaliation for disclosures, refusal to participate in unlawful acts, and post-employment exercise of these rights. It imposes civil penalties up to $10,000 per employee per violation and directs the Labor Commissioner to weigh aggravating factors when assessing penalties.

Who It Affects

California employers and agents—explicitly including client employers under existing wage-theft and safety statutes—human-resources and legal teams, Temp/contract staffing relationships, employees who report violations (including agency employees), and the Labor Commissioner’s enforcement office.

Why It Matters

The bill expands practical protections beyond existing whistleblower statutes by targeting employer policies that chill reporting and by creating a per-employee penalty that can multiply exposure. That combination changes compliance incentives for employers and shifts enforcement mechanics toward administrative penalty assessment alongside court remedies.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

AB 2027 establishes broad workplace protections for employees who disclose suspected violations of law. It forbids employers and people acting for employers from creating or enforcing any rule that would stop an employee from reporting wrongdoing to law enforcement, a supervisor, an authorized coworker, or any public body.

The protection applies whether or not reporting is part of the employee’s assigned duties and covers disclosures based on reasonable cause to believe a violation occurred.

Beyond banning gag rules, the bill makes specific anti-retaliation prohibitions. Employers may not retaliate against employees for making disclosures, for being suspected of making disclosures, for refusing to take part in actions that would cause a legal violation, or for having exercised these rights in a prior job.

The bill also counts reports made by employees of government agencies to their employer as protected disclosures, and extends protection to family members of protected employees when retaliation targets them because of that relationship.For remedies, AB 2027 authorizes a civil penalty of up to $10,000 per employee for each violation, intended to be awarded to the retaliated worker in addition to any other available relief. The Labor Commissioner is charged with considering the seriousness of the violation—type of misconduct, harms suffered, and chilling effects—when determining penalties.

The statute preserves confidentiality privileges for attorney–client and physician–patient communications and protects trade secrets from compelled disclosure. Finally, the bill clarifies that certain entities (including client employers identified in existing wage and safety statutes) fall within the definition of employer, and it permits courts to award reasonable attorney’s fees to successful plaintiffs.

The Five Things You Need to Know

1

The bill prohibits employer policies that prevent employees from reporting suspected violations to authorities, supervisors, authorized coworkers, or public investigative bodies, regardless of job duties.

2

It makes retaliation unlawful not only for actual disclosures but also where the employer believes an employee disclosed or may disclose information.

3

AB 2027 imposes a civil penalty up to $10,000 per employee for each violation; the Labor Commissioner must weigh factors like economic or mental harm and chilling effects when assessing penalties.

4

Exemptions cover attorney–client and physician–patient privileges and trade secret protections; simultaneously, reports by government agency employees to their employer are explicitly protected disclosures.

5

The statute extends protection to family members targeted because of their relationship to a protected whistleblower and includes client employers and other specified employers within its scope.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Subdivision (a)

Ban on employer rules that restrict reporting

This provision outlaws any workplace policy, rule, or regulation that would stop an employee from disclosing information about suspected violations to a government or law enforcement agency, a supervisor, an authorized coworker, or a public body. Practically, employers must review handbooks, confidentiality clauses, and nondisparagement provisions to ensure they do not function as a de facto gag order on reports of noncompliance.

Subdivision (b)

Broad anti-retaliation protection for disclosures

Subdivision (b) makes retaliation unlawful for disclosures and for perceived disclosures. That doubles the risk: employers can be liable not only if they punish someone who actually reported, but also if they act on the belief an employee might report. Employers will need documented, nondiscriminatory reasons for adverse actions to defend against claims alleging pretextual motives.

Subdivision (c)–(d)

Refusal to engage in unlawful activity and prior-job protections

Subdivision (c) protects employees who refuse to participate in acts that would violate laws or regulations, creating a safe harbor for conscientious refusal. Subdivision (d) extends protection to acts taken in prior employment, meaning an employee may not be punished at a current employer for having exercised whistleblower rights in a former position—this raises practical questions for background-check-driven disciplinary decisions.

4 more sections
Subdivision (e)

Agency-employee disclosures treated as protected

This short but consequential clause clarifies that when an employee of a government agency reports to their employer, that communication qualifies as a disclosure to a government or law enforcement agency for purposes of the statute. It prevents narrow readings that would strip public-sector reporters of protections when they notify supervisors.

Subdivision (f)

Monetary penalties and Labor Commissioner role

Subdivision (f) creates an additional civil penalty—up to $10,000 per employee per violation—on top of other remedies. It tasks the Labor Commissioner with considering evidence of harm and chilling effects when setting penalties. For employers, this can create sizable administrative exposure; for employees, it provides an avenue for relief without necessarily filing a full civil suit.

Subdivision (g)

Confidentiality and trade-secret exceptions

The bill excludes from protection disclosures that would violate attorney–client or physician–patient privileges, or that would improperly reveal trade-secret information. Employers may still enforce rules aimed at protecting these narrowly defined confidences, but the carve-outs require careful balancing when privilege assertions and whistleblower claims intersect.

Subdivisions (h)–(j)

Family-member protections, scope of 'employer', and attorney fees

Subdivision (h) bars retaliation against employees because they are related to or perceived to be related to a protected reporter. Subdivision (i) expands the reach of 'employer' to include client employers and certain entities listed in other California statutes, potentially broadening liability in staffing and contractor arrangements. Subdivision (j) authorizes courts to award reasonable attorney’s fees to successful plaintiffs, increasing the litigation stakes for employers.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Employment across all five countries.

Explore Employment in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Frontline employees (healthcare, safety-critical roles) — gain clearer protection to report patient-safety, environmental, or regulatory breaches without fear of policy-based gagging.
  • Temporary and contract workers placed through client employers — become explicitly covered because the bill names client employers, reducing gaps where staffing arrangements previously obscured accountability.
  • Government and oversight bodies — benefit from increased reporting channels and reduced chilling effects, making investigations more likely to surface actionable allegations.

Who Bears the Cost

  • Employers with complex staffing models (staffing agencies, client employers, franchises) — face expanded exposure and must audit policies, contracts, and supervisory practices to avoid penalties and liability.
  • HR and legal departments — will incur compliance costs for revised handbooks, training, investigative protocols, and documentation to defend against 'perceived disclosure' retaliation claims.
  • Labor Commissioner’s office and enforcement agencies — may see increased caseloads and discretionary assessment burdens as they evaluate penalty factors and investigate alleged violations.

Key Issues

The Core Tension

The bill forces a trade-off between protecting employees and the public from the chilling effect of employer-imposed secrecy and preserving employers’ legitimate needs to protect privileged communications, trade secrets, and workplace order; protecting suspicion-based disclosures increases reporting but also raises risks of frivolous or disruptive claims and multiplies enforcement burdens.

AB 2027 is written broadly, which is its strength and its principal implementation challenge. The statute hinges on 'reasonable cause to believe'—a lower evidentiary threshold than proof of violation—so employers will confront claims based on suspicion rather than established wrongdoing.

That makes internal investigations and contemporaneous documentation essential but does not eliminate the risk of costly findings based on subjective determinations of seriousness or chilling effects.

The per-employee, per-violation civil-penalty design can multiply exposure in multi-employee incidents; a single policy that chills reporting across a group could create aggregated penalties that substantially exceed compensatory awards. At the same time, carve-outs for attorney–client and physician–patient privileges and for trade secrets are narrow and fact-sensitive, creating frequent disputes over what information actually qualifies for protection.

Finally, broad definitions that sweep in client employers and protect family members expand liability in ways that may be hard to anticipate and insure against.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.