UK vs EU: what's actually required where

A bright line on one side, none on the other

In the EU, whether a company needs an internal reporting channel is a headcount question with a definite answer: 50 or more workers, and Directive (EU) 2019/1937 requires one (Art. 8(3)) — see the 50-employee threshold, explained for the detail. The UK has no equivalent mechanism. There's no statute that sets a headcount and says "above this line, build a channel." That's a real, structural difference, not a technicality — and it means a UK company can't be told it's "non-compliant" against a threshold that doesn't exist. What it does have is genuine legal and financial exposure that exists independently of headcount, which is a different thing to plan around, not a smaller version of the EU's rule.

What UK law actually protects — and doesn't require

Whistleblowing protection in the UK runs through Part IVA of the Employment Rights Act 1996, inserted by the Public Interest Disclosure Act 1998. It protects a worker who makes a "protected disclosure" from being dismissed (s.103A) or subjected to any other detriment (s.47B) because of it — with no minimum length of service and no headcount threshold on the employer's side. What it does not do is require the employer to have any particular channel in place for that disclosure to happen through. The protection attaches to the worker's disclosure, not to the existence of a formal reporting process.

That asymmetry is exactly why "non-compliant" is the wrong frame for a UK company: there's no compliance bar to clear on the channel itself. The exposure is downstream, at the point a disclosure happens badly — through litigation risk, not a missed regulatory deadline.

Where the exposure actually comes from

Three things create real pressure on UK companies even without a headcount trigger:

• Uncapped tribunal awards. A dismissal found to be automatically unfair under s.103A carries no cap on the compensatory award — unlike ordinary unfair dismissal, which is capped. There's also no two-year qualifying period. A single mishandled disclosure can be an open-ended liability, not a fixed, budgetable one.
• Sector-specific regulatory rules. UK deposit-takers, PRA-designated investment firms, and Solvency II insurers fall within the FCA's SYSC 18 whistleblowing rules, which require firms with 250 or more employees in regulated activities to appoint a senior "Whistleblowers' Champion" and maintain formal whistleblowing arrangements. Firms outside that scope are explicitly invited to adopt SYSC 18 as best practice, scaled to their size — a strong signal of regulatory expectation even where it isn't a hard rule.
• Listed-company governance expectations. Provision 6 of the UK Corporate Governance Code (2024) expects listed companies to have "a means for the workforce to raise concerns in confidence and — if they wish — anonymously," with independent investigation and board-level review of how it's used. It applies on a "comply or explain" basis — not a legal mandate in the way Art. 8(3) is, but a real reputational and governance cost to not having one, for the listed companies it applies to.

What this means if you're a UK company deciding whether to act

None of the above hands you a date to plan around, which is the opposite problem from the EU side: there's no threshold to watch for, so the temptation is to treat this as indefinitely optional. The more useful question isn't "are we required to," it's "what does it cost us if a disclosure goes wrong without one" — and given the uncapped-award point above, that answer tends to be larger than people expect. See penalties for non-compliance for how the EU and UK positions compare on that specifically, and the setup guide for what to have ready regardless of which side of the Channel you're on.

Legal basis

• Art. 8(3), Directive (EU) 2019/1937 — the EU's 50-worker threshold.
• Employment Rights Act 1996, Part IVA (ss. 43A–43L), inserted by the Public Interest Disclosure Act 1998 — the UK's protected-disclosure framework.
• s.103A — automatic unfair dismissal for a protected disclosure, no qualifying period, uncapped compensatory award.
• s.47B — the right not to be subjected to detriment for a protected disclosure.
• FCA Handbook, SYSC 18 — the sector-specific whistleblowing rules for UK deposit-takers, PRA-designated investment firms, and Solvency II insurers.
• Provision 6, UK Corporate Governance Code (2024) — listed-company whistleblowing expectations (Section 1, Principle E).