Featured Insight,

Detriment under the whistleblowing regime: what it means and how to minimise risk

AU | EN
Current site :    AU   |   EN
Australia
Singapore

This is our third article in our four‑part whistleblowing insight series, Whistleblower Protections at an Inflection Point: Practical Insights for a Changing Regime. We encourage you to also read Part One and Part Two. Part Three examines the concept of “detriment” under Australia’s corporate whistleblowing regime. Here, we explain the statutory framing of detriment in section 1317ADA of the Corporations Act 2001 (Cth) (Corporations Act), the courts’ approach to the meaning of detriment, and why an expansive reading is necessary to give practical effect to the regime’s protective purpose. We also summarise the burden of proof for detrimental conduct in the context of s 1317AE orders, how detrimental conduct and decision-maker state of mind are attributed to body corporates, and what must be shown on causation — now settled at the appellate level, by the Full Federal Court's decision in Reiche v Neometals Ltd [2026] FCAFC 53. We then consider recent case law illustrating recognised forms of detriment in practice, before concluding with practical takeaways for organisations seeking to manage risk and uphold whistleblower protections.

The statutory definition of “detriment” and its judicial interpretation

Non-exhaustive definition

The whistleblowing regime in Part 9.4AAA of the Corporations Act prohibits victimisation and enables compensation and other remedies where a person engages in conduct that causes (or threatens to cause) detriment to another person in circumstances where the person believes or suspects that the person has made, may have made, proposes to make or could make a protected disclosure, and that belief or suspicion is the reason, or part of the reason, for the detrimental conduct.

Section 1317ADA of the Corporations Act defines “detriment” for these purposes to include, without limitation, dismissal, injury in employment, disadvantageous alteration of an employee’s position or duties, discrimination, harassment or intimidation, harm or injury including psychological harm, damage to property, reputation, business or financial position, and any other damage to a person.

As the cases discussed below confirm, this list is illustrative and not exhaustive; detriment simply means disadvantage.[1] In Mount v Dover Castle Metals Pty Ltd [2025] FCA 101 (Mount), the Court stated the intention of s 1317ADA was “to capture any disadvantage and that the list was illustrative only”.[2] Reiche v Neometals Ltd (No 2) [2025] FCA 125 (Reiche) endorsed this broad approach, stating there is “no warrant in the text, context or purpose of Pt 9.4AAA to confine the concept of detriment”.[3]

Expansive reading to give effect to whistleblowing regime’s protective design

The practical stakes of getting this right are thrown into sharp relief when there is public scrutiny of how disclosers are treated by organisations. While more obvious forms of detriment (such as physical harm, or termination of employment) may be readily avoided, risk also attaches to more indirect mechanisms, including the nature and content of negotiated exit arrangements and confidentiality terms, that could later be characterised as detrimental or as discouraging engagement with regulators.

This aligns with the regime’s protective purpose: an approach that proscribes novel or unanticipated forms of disadvantage ensures the law remains effective as circumstances evolve. The drafting choice to make s 1317ADA broader than the equivalent definition in the Fair Work (Registered Organisations Act) 2009 (Cth) — by adding “damage to a person’s business or financial position” and “any other damage to a person” — reinforces this intent.

Burden of proof, attribution of detrimental conduct to body corporates and causation

Before turning to these matters in detail, it is worth noting what a decision-maker must have believed or suspected for liability under the detriment provisions to be engaged.

On appeal, the Full Federal Court in Reiche v Neometals Ltd [2026] FCAFC 53 (Reiche Appeal) confirmed that a decision-maker does not need to know or appreciate that a disclosure attracts legal protection under Part 9.4AAA — there is no requirement that they be familiar with the legislation or understand its legal consequences. What matters is whether the decision-maker held a subjective belief or suspicion that a disclosure concerning misconduct or an improper state of affairs had been, might have been, or could be made, and that the discloser had reasonable grounds to make it.

Critically, liability can arise even where that belief or suspicion later turns out to be incorrect — including where the decision-maker acted on a perceived disclosure that, in fact, was never made. This is because the provision is directed at belief or suspicion, not knowledge. Attaching liability to a state of mind, rather than to the existence of objective facts, will means it applies, and therefore discourages reprisal conduct, in a broader range of circumstances.

Burden of proof for remedies

In proceedings where a whistleblower is seeking an order for compensation or another remedy under s 1317AE, the whistleblower bears the onus of “adducing or pointing to evidence that suggests a reasonable possibility” of the detrimental conduct. If that onus is discharged, then the other person (the respondent) bears the onus of proving the claim is not made out.[4] This is a comparatively low bar for the applicant to clear: it only requires evidence pointing to a reasonable possibility of the alleged conduct, not proof on the balance of probabilities. Once that threshold is met, the burden shifts to the organisation to prove that no relevant belief or suspicion was held, or that it was not a substantial and operative reason for the conduct in question.

By contrast, there is no reversal of the onus of proof in claims that a person has been victimised under s 1317AC(1).[5] Of course, these two provisions have different work to do. Section 1317AC(1) establishes whether victimisation has occurred at all: here, the evidentiary burden rests with the person alleging the contravention and will be tested and possibly challenged by the respondent in the ordinary course. Section 1317AE, on the other hand, determines the court’s power to order a remedy: here, the burden shifts to the respondent who must proactively adduce positive evidence of the decision-maker's state of mind and genuine reasons for the relevant conduct.

Attribution of detrimental conduct to body corporates

Section 1317AD(1) requires the alleged victimiser must have engaged in conduct that causes (or threatens to cause) detriment to another person for the reason of, or for reasons that include, their belief or suspicion the person had made, might have made, proposed to make or could make a protected disclosure.

The Court in Reiche at first instance held it is clear the provision is intended to impose legal liability on a company, and that the conduct of a company is conduct that is attributed to the company under the primary rules of attribution or ordinary rules of agency. The Court explained that the requisite belief or suspicion and the reasons or part of the reasons for the detrimental conduct are the state of mind and reasons of the organ of the company (i.e. its board of directors) or the natural person whose conduct and state of mind is attributed to the company for the purposes of those provisions.[6] In circumstances where the detrimental conduct is alleged to have been engaged in through a company’s board of directors, Reiche further held that the board’s decision would be “tainted” by the proscribed reason if at least one member of the Board who was present and voted on the relevant resolution held the relevant belief or suspicion, and that was the reason or part of the reason for the director’s decision to vote in favour of the resolution.[7]

This approach was not disturbed on appeal - the Full Court in the Reiche Appeal accepted the primary judge's finding that no member of the Neometals board held the relevant belief or suspicion when the board resolved to approve the restructure on 21 August 2024, because the directors had not received Mr Reiche's letter raising his concerns until afterwards (later that day).

In practice, this means an organisation cannot insulate a board or committee decision from risk simply because most participants were unaware of a disclosure — if even one relevant decision-maker held the belief or suspicion and it factored into their decision-making, the decision as a whole may be exposed. Where a disclosure has been made or suspected, it is good practice to identify in advance which decision-makers had, or may have had, relevant knowledge, and to ensure that is reflected in the record of any subsequent decision.

Establishing causation

For causation, the proscribed belief or suspicion must be the reason, or part of the reason, for the detrimental conduct. Reiche explains that “part of the reason” does not extend to a reason that was incidental or that is not a substantial and operative factor in the reason for the detrimental conduct. Merely considering or taking into account a proscribed belief or suspicion in making a decision to engage in detrimental conduct does not establish causation where it does not move the decision maker to act.[8]

This causation standard was directly challenged on appeal — Mr Reiche argued in the Reiche Appeal that "the reason, or part of the reason" should not be read as importing any "substantial and operative factor" qualification, since that language does not appear in the statute. The Full Court rejected this argument, holding that the language of s 1317AD(1)(c), although differently worded from the general protections provisions in the Fair Work Act 2009 (Cth), is relevantly indistinguishable from that legislative scheme. The Full Court then drew upon that general protections jurisprudence to confirm that a belief or suspicion will only satisfy the causation element if it was a substantial and operative factor in the decision to engage in the detrimental conduct. A belief or suspicion that was merely considered, or that formed part of the background to a decision without materially moving the decision-maker, will not be enough.

The practical operation of this standard is well illustrated by Mr Reiche's case. Two individuals — the General Counsel and the Chief Financial Officer — were found to have held the relevant suspicion from as early as 9 July 2024, when Mr Reiche provided a letter expressly invoking Part 9.4AAA. The People & Culture Manager was found to have formed the relevant suspicion later that month. She and the Chief Financial Officer prepared the papers for the Board that recommended the restructure that ultimately led to Mr Reiche’s redundancy. However, the Full Court accepted the primary judge's finding on the evidence that neither individual’s suspicion was the reason, or part of the reason, for their recommendation. The later termination decision was explained by legitimate, unrelated reasons: that Mr Reiche's role had been made redundant, that agreement on an alternative role had not been reached within a reasonable period, and that he had not engaged with the business and was thought unlikely to do so. This outcome demonstrates that even where a decision-maker's belief or suspicion is established, an organisation may still avoid liability if it can show, with cogent evidence, that the belief or suspicion did not operate on the actual decision made. It is worth noting that Mr Reiche has since sought special leave to appeal to the High Court, so this guidance may yet be revisited.

Recent case examples of detriment

The following recent decisions illustrate how the courts have applied these principles in practice.

Reiche v Neometals Ltd (No 2) [2025] FCA 125 at [76] (Reiche).

Mount at [148].

Reiche at [75]-[76]. Jackson v Heart Research Institute Ltd [2025] FCA 301 (Jackson) similarly treated detriment as extending beyond loss of legal entitlement (at [231]-[232]).

s 1317AD(2B) Corporations Act 2001 (Cth).

Love v Structural Monitoring Systems PLC [2025] FCA 1665; Reiche v Neometals Ltd (No 2) [2025] FCA 12 at [40].

Reiche at [104].

Reiche at [108].

Reiche at [99]-[100].

Case
Alleged detriment
Court’s finding on ‘detriment’

Jackson v Heart Research Institute Ltd [2025] FCA 301 

  • Loss of chance to negotiate a further contract.

Loss of a real and valuable opportunity to negotiate a further contract, even absent any contractual right to do so, may comprise a detriment within the meaning of s 1317ADA(b) or (j) or otherwise more broadly within the definition of detriment, as it comprises a disadvantage.

The Court found that on the facts no real and valuable opportunity to negotiate a further contract was lost, and accordingly detriment was not established. 

ASIC v TerraCom Ltd (No 3) [2025] FCA 1017 

  • ASX announcements which caused reputational harm and hurt, humiliation, distress and embarrassment.  

Detriment in the form of hurt, humiliation, distress and embarrassment and damage to reputation was caused and is within the concept of detriment as defined. 

Williams v Natural Solar Pty Ltd [2025] FCA 527 

  • Termination of employment 

Termination of employment falls within the definition of detriment in the Corporations Act. 

Reiche v Neometals Ltd (No 2) [2025] FCA 125, upheld on appeal: Reiche v Neometals Ltd [2026] FCAFC 53 

  • Decision to terminate employment; decision to terminate employment with immediate effect
  • Rejection or non-approval of a claim for time in lieu (TIL)
  • Bullying and harassment

The decision to terminate (including with immediate effect) was accepted as detrimental conduct.

An arbitrary, capricious, or unreasonable rejection of a TIL claim may be considered a detriment, even absent a legal right to be granted TIL for that work. This was not established on the facts.

Detriment in the form of bullying or harassment was not established on the facts.

This finding, and the reasoning underpinning it, was upheld by the Full Federal Court on appeal.

Mount v Dover Castle Metals Pty Ltd [2025] FCA 101 

  • Termination of employment
  • Demanding return of company car
  • The making of disparaging remarks causing reputational damage

Termination of the employment contract (and with it the right to possession of the company vehicle) was accepted as a detriment. Demand for the return of the company car did not cause detriment.

Detriment in the form of reputational damage was not established on the facts. 

Regulatory guidance on managing detriment risk

ASIC's Regulatory Guide 270, published in November 2019 to support organisations to develop compliant and ‘good practice’ whistleblower policies, recommends that organisations build detriment risk assessment and control into their existing risk management framework, following four steps:

  • Risk identification— assessing whether anyone may have a motive to cause detriment, including by asking the discloser about the risk of their identity becoming known, who they fear might cause them detriment, any existing workplace conflicts, and whether threats have already been made.
  • Risk analysis and evaluation— analysing the likelihood of each identified risk and evaluating the severity of its potential consequences.
  • Risk control— developing and implementing strategies to prevent or contain the risk, including (for anonymous disclosures) assessing whether the discloser's identity could become apparent during an investigation.
  • Risk monitoring— reassessing the risk of detriment on an ongoing basis, recognising that risk may increase or change as an investigation progresses and even after it concludes.

Anonymous disclosures raise a distinct challenge for detriment risk management: the usual tools of risk identification and targeted controls are harder to apply where the discloser's identity is not known. In practice, this means the focus shifts from protecting a named individual to controlling the disclosure pathway itself — for example, by limiting the number of people who have access to identifying details that emerge during an investigation, being alert to whether an anonymous discloser can be inferred from the nature or timing of the disclosure, and ensuring that any employment or business decisions affecting individuals who could plausibly be the discloser are properly documented and independently justified, in case the discloser's identity later becomes known.

In our experience, the process of conducting these detriment risk assessments upon first receiving a disclosure sharpens the focus on protective controls, including key ‘hygiene’ factors like confidentiality warnings, document governance and implications for existing working arrangements of the parties. Organisations should keep records of each risk assessment and risk control plan. This oversight and record-keeping is not only good governance; it will also assist an organisation seeking to discharge the reverse onus if detriment is later alleged.

Takeaways

Focus area
What you should be doing

Keep your policy current 

Ensure your whistleblower policy is current, accessible and clearly articulates protections against detriment, reporting lines, investigation processes, fair treatment of named persons, and confidentiality safeguards. Refresh training regularly to cover these obligations and the full breadth of detriment, including reputational and psychological harm.

Undertake a detriment risk assessment as soon as a disclosure is made or suspected

Apply ASIC's four-step process (identification, analysis and evaluation, control, monitoring) as soon as a disclosure is received or suspected, not only where the matter appears serious. Document the assessment and the risk control plan and revisit both as the matter progresses.

Separate investigation from employment decision-making

Keep the investigation function separate from employment and business decision-making, so that investigators, employee relations / human resources, performance managers and relevant committees operate within distinct remits. Consider whether appropriate controls include proactive monitoring of any concurrent employment-related processes (such as restructures and performance management) to ensure that the risk, or even the perception, or potential detriment is minimised. This is especially relevant in large entities where such processes will be undertaken by separate functions within the organisation. 

Know when to escalate

As a general guide, a matter should be escalated to legal and/or the whistleblower governance function (and, where appropriate, the board or a relevant board committee) where: (a) any employment or business decision affecting the discloser is contemplated while an investigation is on foot or a disclosure is suspected; (b) the discloser's role, team or reporting line is being restructured for any reason; (c) an exit, settlement or deed of release involving the discloser is proposed; or (d) external communications (including regulatory notifications or market disclosures) may reference the discloser or the underlying matter. Escalating early allows the organisation to ensure the positive genuine reasons for those actions are able to be evidenced before, rather than after, a decision is made.

Document decisions properly 

Maintain decision records that identify who made the decision, what information each decision-maker had, whether they held any belief or suspicion about whistleblowing activity, and the substantial and operative reasons for the decision. Where a board, committee or management group is involved, assume that each participant's state of mind may need to be separately evidenced if detriment is later alleged.

Control the tone and content of external communications

Treat public statements, board papers and ASX announcements concerning a discloser or the underlying matter with particular care —reputational and psychological harm (including hurt, humiliation, distress and embarrassment) are forms of detriment.

Treat threats of detriment as seriously as the real thing

Train management to avoid any suggestion that speaking up will jeopardise a person's prospects, pay, references or role security. Escalate and document any such incidents promptly, even if no adverse action is ultimately taken.

Scrutinise exit and settlement arrangements

Where an exit or settlement arrangement is proposed following a disclosure, ensure it does not purport to restrict the discloser's ability to make further disclosures to ASIC, APRA or another regulator, and consider how the arrangement would be perceived if scrutinised later.

Track the statutory review

Monitor Treasury's statutory review as it relates to detriment and remedies, alongside the eligibility and disclosable matter issues addressed in Parts One and Two, as reform in this area may directly affect your risk exposure and evidentiary burden.

Reference

  • [1]

    Reiche v Neometals Ltd (No 2) [2025] FCA 125 at [76] (Reiche).

  • [2]

    Mount at [148].

  • [3]

    Reiche at [75]-[76]. Jackson v Heart Research Institute Ltd [2025] FCA 301 (Jackson) similarly treated detriment as extending beyond loss of legal entitlement (at [231]-[232]).

  • [4]

    s 1317AD(2B) Corporations Act 2001 (Cth).

  • [5]

    Love v Structural Monitoring Systems PLC [2025] FCA 1665; Reiche v Neometals Ltd (No 2) [2025] FCA 12 at [40].

  • [6]

    Reiche at [104].

  • [7]

    Reiche at [108].

  • [8]

    Reiche at [99]-[100].

  • Show More
Latest Thinking
Insight
The Department of Home Affairs (Department) has released the Streamlining and Modernising the Security of Critical Infrastructure Act 2018 Consultation Paper (Consultation Paper) here, proposing a second tranche of reforms to the Security of Critical Infrastructure Act 2018 (Cth) (SOCI Act).

15 July 2026

Insight
From 1 July 2026, in New South Wales it is now mandatory for persons conducting a business or undertaking to comply with Approved Safety Codes of Practice.

14 July 2026

Insight
In this edition of the Rail Round-up, we summarise the latest developments across the rail industry, with a particular focus on the recent budget announcements and significant shifts in national rail policy.

10 July 2026