Whistleblowers against authority: what the Whistleblower Act protects and when to go external

The Whistleblowers Act can protect those who raise the alarm about corruption, fraud, procurement fraud and other malfeasance in government agencies. But protection depends on how you report, what you can show and whether the data is of public interest.

Whistleblowing against an authority is not the same as a regular complaint. It is not just a case of a case manager being unpleasant, a wrong decision or an internal conflict gone wrong. The essence is that someone in a work-related context raises the alarm about malfeasance for which there is a public interest in them coming to light: corruption, fraud, procurement fraud, unauthorised interference, systematic violations of the law, serious safety deficiencies or abuse of public power.

This is also why whistleblowing is particularly important in the public sector. Authorities, municipalities, regions and publicly owned companies handle tax money, coercive power, personal data, procurements and decisions that can change people's lives. When errors are hidden internally, the damage becomes greater than a personnel problem. It becomes a trust issue for

This article goes over how whistleblower law works in practice, when you should use internal channel, when external reporting might be the right way, how whistleblower freedom differs from whistleblower protection, and what mistakes can make a report weaker.

Quick summary

The Whistleblowers Act applies to work-related tasks.
• You must have received the information through your current, past or upcoming work, assignment, internship, consulting role or similar
.
• There has to be public interest. Serious or systematic misconduct is more clearly protected than purely private labour disputes
.
• You need reasonable reason to believe that the data is true. The law does not require you to be able to prove everything from the beginning, but pure rumors are risky
.
• Internal reporting is often the first route. However, external reporting may be warranted if internal reporting involves the risk of retaliation, destruction of evidence or ineffective management
.
• Disclosure to the media has a higher threshold. It may be covered by protection, but requires special conditions under the law and is not to be confused carelessly with freedom of communication
.
• Protection is strong but not unlimited. The law does not provide a free right to disclose documents, violate confidentiality in any way or obtain information by crime
.

What is a Whistleblower?

A whistleblower is a person who reports information about misconduct. According to the Act (2021:890) on the Protection of Persons Reporting Malpractice, reporting in a work-related context is covered when there is a public interest in the disclosure of the information. The Act also covers certain breaches of EU law and national rules implementing or supplementing EU rules

This means that whistleblowing can touch both public and private business. For example, against an authority, it can be:

• difficulty in decision making or preparation,
• friendship corruption and improper benefits,
• tailor-made public procurement,
• repeated breaches of confidentiality or unlawful data breaches;
• systematic inaccuracies in the decisions of the authorities;
• obfuscation of discrepancies, manipulated statistics or false evidence;
• undue influence by suppliers, politicians or external actors;
• deficiencies that may threaten life, health, the environment, privacy or the rule of law.

Who is protected by the Whistleblower Act?

The protection does not apply only to permanent employees. The protected circuit is wide. The Swedish Work Environment Authority describes that, for example, trainees, volunteers, consultants and shareholders can also be covered. The text of the law mentions workers, jobseekers, trainees, volunteers, self-employed persons, persons carrying out work under the control and direction of the operator, as well as persons who previously belonged to these groups.

For government environments, this is important. A procurement consultant, a hired IT technician, a former case manager, an intern at a municipal administration or a supplier employee working closely with the authority may be sitting on information that ordinary management does not want to see. If the data comes from a work-related context, the Whistleblower Act may become relevant even if the

When is an ordinary complaint not enough?

A large proportion of legal certainty problems start as individual complaints: someone does not get documents out, a case officer does not respond, an investigation is sloppy or a decision is based on errors. It may be serious, but it's not automatic whistleblowing

Whistleblowing becomes more apt when the problem shows a larger pattern. Examples:

• From wrong decisions to system failures: an individual error of judgment is an appeal problem; recurrent misjudgments despite inside knowledge can be a misstatement.
• From bad boss to reprisals: harsh tone is an occupational safety issue; threats, reassignment or ostracism after alarm can be reprisal.
• From lack of service to cover-up: late feedback is delay; active removal of documents, misleading record keeping or improper confidentiality can be greater malfeasance.
• From procurement miss to corruption risk: a weak requirement specification can be sloppy; claims that recurrently favour the same vendor with personal connections can be whistleblower issue.

Public interest: the crucial frontier

The Swedish Work Environment Authority stresses that there should be a public interest in the disclosure of the information. These typically involve serious misconduct, involving a wider circle than the reporting person and situations where there is a legitimate public interest in rectifying or terminating the error.

A purely personal conflict over pay, schedule, holidays, the boss's tone or internal career is not normally covered simply because it is perceived as unfair. However, if the same conflict concerns someone trying to silence reporting on corruption, patient safety, procurement fraud or illegal record use, the issue may change character

In the world of government, the public interest must be assessed with public power in mind. When a municipality uses tax funds, when the Police Authority uses registers, when social services document families with children or when a region procures care, internal deficiencies can also have a direct impact

Internal reporting: when it can work

Public and private employers with at least 50 employees shall have internal reporting channels. According to the Swedish Work Environment Authority, the function should be able to receive reports, follow them up and provide feedback. It should also be independent and autonomous. Reporting shall be possible in writing, orally and at a physical meeting if requested by the reporting person.

Internal reporting may be appropriate when:

• the misconduct does not appear to involve senior management,
• there is a working whistle-blower function with clear instruction,
• you need to receive a confirmation of receipt and an internal examination,
• the risk of destruction of evidence is low,
• You want to show that you have given the business a chance to act.

But internal reporting isn't always the best. If the same people who are supposed to receive the report are part of the problem, the channel can become a warning signal to those who need to be audited. It is particularly relevant in cases of litigation, procurement, suspicion of bribery, misuse of records and situations where managers have already shown a willingness

External reporting: when you can go to an authority outside your own organization

The Whistleblowers Act provides protection when reporting to the external reporting channels of competent authorities. The Swedish Work Environment Authority has a list of authorities responsible for whistleblowing. It states, for example, that the Swedish Competition Authority is responsible for malpractice in public procurement and the competition area, the Privacy Protection Authority for certain privacy/personal data issues and the Eco-Crime Authority for the fight against fraud relating

External reporting may be justified when you have reasonable grounds to believe that internal reporting would entail a risk of retaliation or that the misconduct is unlikely to be remedied effectively. It may also be relevant in the event of imminent danger to life, health, safety, the environment or other extensive damage

For public procurement, external channel is often more reasonable than in ordinary personnel matters. If the suspicion is that requirements have been written for a supplier, that relationships have affected allocation, or that invoices have been approved despite discrepancies, the internal chain itself may be part of the problem. Then the report should be formulated in a factual manner, with a clear timeline and concrete basis

Publication and media: strong tool, higher risk

The law may also provide protection in the event of publication, for example by turning to the media. The threshold is higher. Under the law, protections may exist if the person first reported externally without reasonable follow-up, if there is imminent or obvious danger, or if external reporting would present a risk of reprisal or that the error would be unlikely to be effectively remedied

In addition, public servants have constitutionally protected rights in the form of freedom of communication and whistleblower protection in certain media. The Whistleblower Act does not curtail such protection. But the protections are not identical. Freedom of information refers to the right to provide information for publication in constitutionally protected media. The Whistleblowers Act deals with reporting of misconduct in a work-related context and protection against reprisals. Don't mix them up in your risk assessment

The practical advice is simple: if the data is sensitive, confidential or concerns national security, take legal advice before providing material. The law does not provide a general right to disclose documents and does not protect the person who commits crimes to obtain information.

Retaliation: what the employer must not do

An operator shall not obstruct or attempt to obstruct reporting and shall not retaliate on the basis of reporting. Retaliation can include dismissal, dismissal, reassignment, non-promotion, worse schedule, harassment, threats, revocation of duties, blackpainting, or other actions that actually penalize reporting

The Act also includes a burden of proof regulated protection. If the reporting party demonstrates circumstances that give rise to the presumption of retaliation, the counterparty shall demonstrate that such measures have not been taken. That makes documentation very important. Therefore, save the dates, emails, summonses, changed duties, manager comments, witnesses and the time when the employer became aware of the

Corruption and procurement: typical whistleblower situations

Corruption in public procurement is one of the clearest areas where whistleblowers can be crucial. The formal procurement document often shows only what is outwardly visible: advertisement, questions and answers, tenders, evaluation and award decisions. The real risk often lies before the advertisement and after the signing of the contract.

A report can become strong if it shows any of the following:

• requirements specifications modified after informal contact with a particular supplier;
• friendship or friendship between client, politician, consultant and supplier,
• direct procurement split to avoid thresholds;
• systematically accepted deviations during the term of the contract,
• invoices notarized despite non-delivery;
• unauthorised gifts, trips, dinners, discounts or future job offers,
• consultants who assist the Authority but at the same time are connected to the market;
• bid rigging, mock bidding or oddly recurring winning patterns.

Here you should not just write “corruption”. Describe the mechanism: who had the relationship, what document does it show, what decision was affected, what amount applied, which alternative providers were excluded and who approved the

Evidence: build the report as a timeline

A good whistleblower report is not dramatic. It is traceable. It separates facts from conclusions and allows the recipient to control

Feel free to use this structure:

1. As for the mismatch? Write a sentence: “I report suspected misconduct and undue supplier interference in Procurement X.
”
2. Why is there public interest? Enter tax dollars, public authority, procurement, personal data, legal certainty, patient safety or other societal
risk.
3. Which persons and functions are affected? Specify roles, not unnecessary personal data
.
4. Timeline. Dates, appointments, emails, decisions, changes, invoices,
internal alerts.
5. Actions. List diary numbers, agreements, emails, protocols, invoices, logs, claims versions or other documents
.
6. What do you want the recipient to do? Investigate cases, secure documents, stop contract extensions, check invoices, hand over to
the appropriate authority.
7. Risk of reprisals. Describe concretely whether you think internal reporting is dangerous or ineffective
.

Mistakes that weaken protection

• To mix everything. Separate personal conflict, work environment, judicial error, corruption risk and criminal suspicion
.
• To exaggerate. Write “suspected vice” if you can show a relationship, not “proven corruption” if you can't show exchange of favor
.
• Sending too much personal data. Include only data needed to understand the misconduct.
• Disclosing documents without risk assessment. The law does not provide a free right to disseminate documents, especially classified documents
.
• To use the employer's open email thread if you fear reprisals. Consider receipt confirmation, access, and traceability
.
• Waiting too long with reprisal documentation. Write down changes in duties, threats, meetings and manager
comments right away.

Template: short whistleblower report against authority

Where are you going to turn?

• Internal whistleblower function: when the channel is independent and the misconduct can be investigated without destroying evidence.
• External reporting channel: when the appropriate competent authority exists and internal reporting is inappropriate or insufficient.
• Competition Authority: in the case of public procurement, competition problems, unauthorised direct procurement or bid rigging.
• IMY: in the case of serious personal data and privacy issues within their area of supervision.
• JO or JK: in the exercise of public authority, administration of procedures, the principle of publicity or errors in public activities that should be examined.
• Police or Ecobort Agency: in case of concrete suspicion of a crime, bribe, faithlessness, fraud or other crime.
• Department, security officer or lawyer: when you risk retaliation or need to assess confidentiality, evidence and channel selection.

Conclusion: whistleblowing is a method, not just a brave moment

The strongest whistleblower protection occurs when you act methodically. Write matter-of-factly. Document early. Choose a channel based on risk. Avoid overwords. Separate facts from suspicions. Please state why the matter is of public interest. And be especially careful when the material contains confidentiality or sensitive personal data

For government agencies, whistleblowers are not a nuisance. They are a test of whether control systems work when the problem sits close to power. An organization that only protects its facade forces external alarms. An organization that takes reports seriously reduces both corruption risk, judicial losses and

Sources

• Riksdag: Act (2021:890) on the protection of persons reporting misconduct
• Swedish Work Environment Authority: Whistle-blowing
• Swedish Work Environment Authority: Explanation on the Whistleblowers Act
• The Swedish Work Environment Authority: Internal channels for whistleblowing
• Swedish Work Environment Authority: Authorities responsible for whistleblowing