Whistleblowing (Procurement)

Whistleblowing is one of the most effective tools available for detecting and deterring procurement fraud, corruption, and anticompetitive conduct. Regulators and anti-corruption bodies across Europe consistently find that a significant proportion of detected procurement irregularities are first identified through internal or external reports from individuals who observed wrongdoing directly. Without effective whistleblowing protections, many of these reports would never be made.

What is Whistleblowing (Procurement)?

In a procurement context, whistleblowing refers to the disclosure of information about suspected wrongdoing by someone who has reasonable grounds to believe that the information is true. The wrongdoing can include: corruption or bribery involving procurement officials or suppliers; bid rigging or other cartel activity affecting public contracts; fraud in tender submissions or contract delivery; conflicts of interest that have not been declared or managed; and misuse of public funds during contract management.

Whistleblowing can be internal (a report made within an organisation to a manager, compliance officer, or designated reporting channel) or external (a report made to a regulator, competition authority, national audit body, OLAF, or the media). Both forms are legally protected under the EU Whistleblower Directive (2019/1937), provided the reporter had reasonable grounds to believe the information was accurate at the time of disclosure.

The practical importance of whistleblowing in procurement is recognised by major EU institutions. OLAF, the European Court of Auditors, and the EPPO all operate external reporting channels. National audit bodies, competition authorities, and procurement oversight bodies across EU member states and in the UK have similar channels.

Why it matters for bidders

Suppliers often have unique insight into procurement irregularities that contracting authorities cannot detect from the inside. An employee who observes a colleague coordinating with a competitor before a tender submission, a salesperson who is approached by a buyer with an implicit request for a gift, or a contracts manager who discovers invoices for services never rendered: all of these are people who may hold critical information that could prevent public harm.

Suppliers should ensure that their organisations have clear internal reporting procedures, that staff know how to use them, and that no retaliation against reporters is tolerated. The EU Whistleblower Directive (2019/1937) requires organisations with 50 or more employees to establish internal reporting channels by the applicable implementation deadline. Beyond legal compliance, effective internal reporting channels protect organisations from regulatory and reputational damage by surfacing problems early.

Example

An accounts payable clerk at a construction subcontractor notices that invoices are being submitted for work on a government building contract at rates significantly higher than the agreed schedule of rates, with supporting documentation that appears to have been altered. She reports the concern internally via her company's confidential reporting line. The report is escalated to the compliance team, investigated, and referred to the contracting authority and the national fraud authority. Three senior managers are subsequently charged. The clerk is legally protected from any retaliatory dismissal under applicable national law implementing the EU Whistleblower Directive.

Frequently Asked Questions

Can a supplier's employee whistleblow about the supplier's own conduct?

Yes, and this is in fact the most common form of effective whistleblowing. An employee who becomes aware that their employer is participating in bid rigging, submitting false documents, or paying bribes to win a contract can report internally or externally. The legal protections under the EU Whistleblower Directive apply equally to disclosures about one's own employer.

What protection does a whistleblower have against retaliation?

The EU Whistleblower Directive (2019/1937) requires member states to prohibit retaliation against protected reporters and to ensure effective legal remedies are available, including reinstatement and compensation. The UK, despite leaving the EU, maintains strong protections under the Public Interest Disclosure Act 1998 (PIDA), which provides employment tribunal remedies for protected disclosures.

Is an anonymous report treated the same as an identified one?

Not always in practice, though the law does not require identification. Many reporting channels accept anonymous reports, but investigation is typically easier when the reporter provides contact details. Some regulatory bodies commit to protecting the identity of reporters even when they are identified internally.