Courage or Consequence? Navigating the Differences Between Whistleblowing and Defamation

 

Whistleblowing is often seen as an act of courage, the willingness to speak truth to power and shine light on wrongdoings. It plays a vital role in promoting transparency and accountability, particularly within corporate and public institutions.

 

However, in Malaysia, courage without caution can carry serious consequences. While the law protects genuine whistleblowing, allegations made without a proper basis may expose a person to legal risks. A disclosure made in good faith through the correct channels may be fully protected under the Whistleblower Protection Act 2010 (“the Act”), while another disclosure, made dishonestly and recklessly, can result in adverse legal consequences.

 

 

1.  Introduction 

 

The Act encourages individuals, known as the ‘whistleblower’, to report “improper conduct” to prescribed enforcement agencies. In return, it protects the whistleblower against civil, criminal and employment-related consequences, but only where such disclosure is made through the prescribed channels and in good faith.

 

A whistleblower who satisfies these conditions is protected even if the allegation later turns out to be unsubstantiated. In contrast, any allegations or disclosures made publicly or outside the prescribed channels, such as to the media, on social media platforms or directly to third parties would fall outside the Act’s protection and may attract defamation liability if the statement is proven to be false and it harms another’s reputation.

 

 

2.   Whistleblowing vs. Defamation

 

Whistleblowing and defamation can appear similar on the surface, both involve making statements about another party’s alleged wrongful conduct. However, the law treats them very differently.

Whistleblowing is governed primarily by the Act, which confers immunity from civil, criminal and employment-related repercussions to individuals who disclose improper conduct in good faith and through the proper statutory channels, even if the allegation is later found to be unsubstantiated.

 

Defamation, on the other hand, arises when a person makes a false statement that injures another’s reputation. Statements communicated outside the Act’s prescribed reporting channels, such as to the press, on social media, or directly to third parties, do not fall under whistleblower protection. Such disclosures may constitute defamation unless it is defensible through recognised defences such as justification, qualified privilege, or fair comment.

 

In essence, the distinction does not only depend on what is said, but on how, where, and why it is disclosed. A whistleblower loses statutory protection once the disclosure falls outside the Act and at that point, the full operation of defamation law applies.

 

 

3.   When Whistleblowing and Defamation Intersect 

 

Whistleblowing and defamation can intersect, particularly when the disclosures are false, reckless or made outside proper channels. Although the law encourages individuals to report misconduct, it does not grant automatic protection to anyone who labels themselves a whistleblower.

 

The courts have had to carefully balance an individual’s right to protect their reputation under defamation law with the public interest in allowing genuine concerns to be raised. Where allegations are made in a manner that does not comply with statutory requirements, the law may treat them as defamatory publications rather than protected disclosures. This risk arises where:

 

1. The statement/words are framed as factual allegations rather than comment: Allegations framed as facts can be defamatory where they imply the existence of events that are untrue or unverified.

2. The subject matter is of public interest, but still subject to defamation scrutiny: Raising issues that concern the wider community does not, in itself, exempt a person from the obligation to ensure accuracy and to use the appropriate channels.

3. The allegation lacks sufficient factual basis: If the underlying facts are incomplete, misleading or cannot be substantiated, any conclusions or accusations drawn from them may be regarded as defamatory rather than as protected disclosure. 

4. The statement is not one that a fair‑minded person would reasonably make: If the allegation is made hastily, without proper inquiry or without an honest and reasonable belief in its truth, the law may treat it as a defamatory publication rather than a responsible disclosure of misconduct.

    

These considerations illustrate the limits of whistleblower protection in Malaysia. While the law encourages individuals to speak up about wrongdoing, it also upholds the rights of others to defend their reputations when allegations are made irresponsibly. Whistleblowers are therefore not unconditionally shielded, protection is lost when disclosures are made publicly, without adequate basis, or outside the prescribed mechanisms. 

 

Even where intentions are genuine, a person may find themselves defending a defamation claim, facing uncertainty and legal exposure. This is a cautionary reminder that speaking out without understanding the legal boundaries can quickly lead to consequences far broader than intended. Courage must be matched with care – verifying facts, using proper channels, and ensuring that allegations are made lawfully.

 

 

4.   Legal Reforms for Strengthened Protection 
 

As noted above, whistleblower protection under the Act is not absolute. Beyond the risk of defamation, several exemptions within the Act may leave whistleblowers vulnerable and, in some cases, protection may be automatically revoked. 

For years, activists have advocated for stronger safeguards in encouraging people to report misconduct without fear. Acknowledging these concerns, the Whistleblower Protection (Amendment) Act 2025 (“the Amendment”) was passed by the Dewan Rakyat on 22 July 2025 and in force from 15 January 2026, marking a significant step in improving the Act’s effectiveness. 

 

 

Current Limitations

 

Under the current regime, the Act only protects disclosures that are not prohibited by any existing law. For example:

 

 

• A whistleblower who discloses information obtained through their official duties could lose protection because such disclosure is prohibited under the Penal Code.

• Similarly, civil servants who expose information classified under the Official Secrets Act 1972 risk criminal prosecution, even if disclosure serves the public interest.

 

Key Changes Introduced by the Amendment

 

The Amendment introduced the following key improvements:

 

 

• Broader scope of protected disclosures – The Amendment removes the proviso in Section 6 that denied protection where a disclosure contravened any other written law. Whistleblowers who report misconduct involving information previously restricted under the OSA or the Penal Code will now be entitled to protection, subject to other conditions being met.

• Discretion to maintain protection for implicated whistleblowers – The new Section 11(1A) gives enforcement agencies the discretion to maintain whistleblower protection even where the whistleblower was involved in the misconduct. This represents a meaningful departure from the current mandatory revocation framework and recognises that compelling disclosures may sometimes come from individuals who were themselves a party to the wrongdoing.

 

5.   Practical Tips for Organisations

 

For organisations, managing whistleblowing responsibly is essential not only to encourage internal accountability but also to safeguard corporate reputation. Clear structures and fair processes help ensure issues are addressed early without escalating into public disputes. Among the key steps organisations should consider include:

 

1. Establish clear whistleblowing policies and reporting mechanisms – Employees should understand exactly how, where and to whom to raise concerns. Policies should specify prescribed channels, timelines for acknowledgment and the confidentiality protections available.

2. Educate employees on the legal boundaries – Ensure employees understand the distinction between protected disclosures and unprotected public statements, and the circumstances in which legal protection may be lost.

3. Handle complaints impartially and transparently – Take reasonable steps to investigate whistleblowing reports fairly and consistently, and take reasonable steps to manage reputational risks associated with both substantiated and unsubstantiated allegations.

4. Consider appropriate remedies where disclosures are found to be false or reckless – This may include mediation, requests for retraction or, where warranted, legal action for defamation.

 

 

6.   Practical Guidance for Whistleblowers

 

For potential whistleblowers, acting responsibly is crucial. The law offers important protections, but these can easily be lost if disclosures are made improperly or without adequate basis. To minimise risk and ensure your disclosure remains protected:

 

1. Use the proper channels – Report internally or to the prescribed enforcement agencies before considering any external escalation.

2. Document your evidence carefully – Maintain clear records that support the substance of your disclosure.

3. Avoid going public – Statements made on social media or to the press can negate all statutory protections and risk exposure to defamation proceedings.

4. Seek legal guidance – Consult a lawyer before publishing or circulating any statements that could affect another person’s reputation to understand the risks and protections available.

 

7.   Conclusion

 

Whistleblowing and defamation exist on a delicate spectrum. Speaking up is vital for accountability, but reckless disclosures can carry serious legal consequences. Courage must be guided by caution: understanding the law, using the proper channels and seeking guidance ensures that integrity does not inadvertently lead to liability.

 

Knowing where the line lies between courage and consequence can make all the difference, for whistleblowers, for organisations, and for the integrity of Malaysia’s accountability framework.

 

 

This article was authored by Ariff Firman (Co-Head) and Nur Aliya Syaffa Binti Johari (Associate).

 

---

[1] WPA 2010, s 6(1).

[2] The Malaysian Reserve, ‘Revised WPA removes key barrier to protect whistleblowers’ (23 July 2025) < https://themalaysianreserve.com/2025/07/23/revised-wpa-removes-key-barrier-to-protect-whistleblowers/#google_vignette> accessed 24 October 2025.

---

Key Contacts

Please contact our team if you have any questions.

Dato’ Brian Law | Co-Head, White-Collar Crime and Corporate Investigations

Ariff Firman | Co-Head, White-Collar Crime and Corporate Investigations