Workplace scenarios

The situations below are fictional but realistic. For each one, decide what you would do before reading the answer, and notice how the same principles keep returning: report facts, choose the right route, and get advice when unsure.

Scenario 1: The invoices that do not add up

You process supplier payments and notice repeated invoices, approved by one manager, for a company you cannot find any trace of. Each invoice sits just below the threshold that would require a second signature. You have no proof of fraud, only a pattern that worries you.

What good looks like: You do not investigate, interview colleagues, or copy documents you have no right to hold. You write down the facts you already have, the dates, amounts, and approver, and raise the concern through your whistleblowing route rather than with the manager involved. A reasonable belief is enough; you do not need to be certain, or even correct, to be protected.

Scenario 2: The concern is about your own manager

You believe your line manager is telling staff to skip safety checks to hit targets. The policy says concerns normally go to your line manager first, and you are anxious about what raising it could mean for you.

What good looks like: You are never required to raise a concern with the person it is about. You use an alternative route, such as the designated whistleblowing officer or the confidential hotline, and you keep a brief private note of what you reported, to whom, and when. If you are unsure how to proceed, you call the charity Protect for free, confidential advice before acting.

Scenario 3: A team member confides in you

You are a team leader. A member of your team tells you, nervously, that she believes medication records are being altered after the fact. She asks you to promise that nothing she says will go any further.

What good looks like: You listen without interrupting or defending the organisation, thank her for speaking up, and make a factual note of what she said. You do not promise absolute anonymity or specific outcomes; you promise to protect her confidentiality as far as you possibly can and to pass the concern through the proper route. You escalate it promptly, and you take conscious care that no later decision affecting her could look like retaliation.

Scenario 4: Nothing has happened

Three months ago you reported a serious misuse of customers' personal data through the internal route. You have had no acknowledgement, the practice continues, and you are starting to think about contacting a journalist.

What good looks like: You chase the concern once through the internal route, keeping notes of every step. If the silence continues, you consider a disclosure to the relevant prescribed person, here the Information Commissioner's Office, reasonably believing the information is substantially true. The media is a narrow last resort with strict conditions, so you take advice from Protect before going anywhere near that route.