blog_9-12-24_v3

Compliance Practice: Implementing A Whistleblower Policy

The Consumer Financial Protection Bureau has recently raised concerns about broad company confidentiality agreements potentially intimidating employees from reporting suspected or unlawful actions by their employers.

While opinions on this issue vary, it does highlight the opportunity to review your company’s confidentiality agreements to ensure employees are not restricted from reporting wrongdoings to government agencies. Rather than debate confidentiality agreements, it is even more relevant to understand why having a whistleblower policy is a sound business practice and its importance in establishing and maintaining a robust compliance program.

Whistleblowing involves reporting misconduct, illegal activities, or other wrongdoings within an organization. These reports can cover illegal activities, financial mismanagement, harassment, or safety violations. While exposing your company to potential negative publicity may seem counterintuitive, fostering a company culture that encourages a ‘see something, say something’ approach and prioritizes compliance is crucial to an organization’s reputation. Encouraging employees to speak up about potential compliance or ethical issues gives a proactive advantage to your organization. Open communication serves as an early warning system, allowing organizations to address potential problems or vulnerabilities before they escalate into more significant issues. This reporting can protect your company from legal, financial, or reputational risks.

Establishing a culture of compliance can take years, but once in place, it can be easily maintained if properly nurtured. A culture of compliance starts with top management engagement and is shared with every employee in the organization. Organizations with an open-door policy empower employees to share concerns, which can prevent future misconduct and escalating problems from the onset. Addressing issues internally can make employees feel valued, promoting a culture of compliance and sending a powerful message that ethical behavior is encouraged and a core value. This, in turn, can enhance employee loyalty to the company.

Implementing a Whistleblower Policy

Define the Purpose of the Policy

Commit to upholding ethical, moral and legal conduct while encouraging open communication from everyone in the organization. Ensure the policy provides employees with a clear path to raise concerns and reassures them they will be protected from retaliation.

Identify What Types of Concerns Should Be Raised

Employees should be encouraged to report:

  1. Violations of any law or regulation.
  2. Activities not in line with company policies or codes of conduct.
  3. Incorrect financial reporting or misuse of funds.
  4. Improper conduct.
  5. Dangers to public safety or health.

Identify Who to Approach with Concerns

List the management team members designated to handle concerns. This may include their direct manager or specific individuals depending on the nature of the concern—be it legal, financial, business or employment-related.

Approach with Kindness and Empathy

Ensure those receiving the compliance reports have an empathetic nature and express appreciation for employees coming forward. Recognize that the person reporting may be concerned about repercussions, upset, afraid or unsure if they will be taken seriously. Their bravery in coming forward is crucial for the company to identify and address risks.

Protect Confidentiality

Assure employees that their identity will be kept confidential during the reporting and investigation process, including the individual reporting the concern. While anonymous allegations can be adopted, they may limit the investigation. Thus, encouraging employees to feel comfortable about coming forward as soon as possible will aid in thorough investigations and prompt resolutions.

Provide Evidence

While employees should not be expected to prove the truth of an allegation, they should demonstrate that the report is made in good faith. Management must evaluate inquiries to determine whether an investigation is appropriate, with many concerns potentially being resolved without further investigation.

Outline the Investigation Process

Detail the investigation procedure within your organization. The process should include what the investigation entails, such as interviews and documentation requirements. This includes any further action if needed for the individual making the report.

Prevent Retaliation

Address concerns of retaliation from the company. Monitor for retaliation against employees, considering the rights of those coming forward and those who are the subject of the incident. Document the steps and consider any risk of interference in an investigation, ensuring methodical and fair measures are in place to prevent it.

Keep Everyone Updated on the Investigation

Ensure the individual who came forward is updated on the investigation’s progress. While ongoing confidentiality may limit detail sharing, ensure they understand their voice was heard and appreciated, minimizing the anxiety of uncertainty. If the investigation proves unfounded, communicate this to the individual as well. They may be unhappy with the outcome, but it’s important for them to understand the organization’s commitment to a thorough investigation and providing open and transparent communication. More importantly, any retaliation because of the investigation should be reported immediately.

Record Keeping

Thoroughly document all reports and outcomes. This helps track the progress of the report and provides an audit trail if there are any questions about how the investigation was conducted and resolved.

Policies and Training

Ensure your company has adequate policies and procedures to address compliance and that all employees know where to access them. Encourage employees to ask questions and provide training on why processes are done a certain way. Ensure employees understand that certain actions could violate laws or company policies, so it’s helpful for everyone to be informed.

Implementing a whistleblower policy is a proactive, best-in-class measure that helps create a culture prioritizing open communication. It sets up a systematic process to address problems before they become bigger issues, fostering a healthier, more compliant organization.

Contributing article for Used Car Dealer provided by:

Angela Walsh

VP of Compliance and Legal Agora Data, Inc.

Start Making More With AgoraCapital

Get access to unlimited, low-cost capital to use any way you want. See if AgoraCapital would benefit your business.

Leading-edge analytics gives you leading-edge power

Sign up for a free account and gain access to our state-of-the-art auto loan portfolio analytics tools.