Canadian whistleblower protection law "Public Servants Disclosure Protection Act"
Canada protects whistleblowers in the federal public service through the Public Servants Disclosure Protection Act (PSDPA). The Act came into force on 15 April 2007. It lets a public servant report serious wrongdoing and shields them from payback. A private-sector worker, though, is not covered by it at all.
Key facts
- The law covers the federal public sector only, not private companies.
- You can report a crime, a misuse of public money, or a serious danger to health or safety.
- Reports go to a senior officer, the Public Sector Integrity Commissioner, or, in an emergency, the public.
- A dedicated tribunal can undo a reprisal and discipline the person who ordered it.
- Taking revenge on a whistleblower is a crime, with fines up to $10,000 and jail time.
Who does the law protect?
The PSDPA protects people who work in Canada's federal public sector. That means public servants in government departments, most federal agencies, and Crown corporations. Cover turns on where you work, not on the report itself. If your job sits outside the federal public service, this Act does not reach you.
The protected group is broad:
- staff of federal departments and agencies named in the Act's schedules;
- employees of most Crown corporations;
- members of the RCMP, through their own set of internal steps;
- former public servants, for a disclosure about their old workplace.
You also have to act in good faith. A protected disclosure is one you make honestly, because you believe a real wrong has happened. You do not need to be right in the end. You do need an honest belief, not a grudge or a bid to dodge your own discipline.
Three bodies sit outside the Act. The Canadian Forces, the Canadian Security Intelligence Service (CSIS), and the Communications Security Establishment (CSE) each run their own process instead. The bigger gap is the private sector. A worker at a bank, a mine, or a tech firm gets nothing from this law. Their only federal shield is a single line in the Criminal Code, which we come to below.
What counts as a wrongdoing?
A wrongdoing under the Act is a serious problem in or touching the public sector. It is not a small rule slip or a private complaint about your boss. The law names six kinds. Each one has to be real and serious to count.
- breaking any federal or provincial law;
- a misuse of public money or public property;
- gross mismanagement in the public sector;
- a substantial and specific danger to people's health or safety, or to the environment;
- a serious breach of a public-sector code of conduct;
- directing or advising someone else to do any of the above.
"[A]n act or omission that creates a substantial and specific danger to the life, health or safety of persons, or to the environment, other than a danger that is inherent in the performance of the duties or functions of a public servant."
Section 8, Public Servants Disclosure Protection Act
A department that hides a safety flaw would fit. So would a manager who steers contracts to a friend. The Act also cuts the other way. A public servant who commits a wrongdoing faces discipline on top of any other penalty, up to the loss of their job.
Who can you report to?
The Act gives a public servant three routes. You can go to a senior officer inside your own organisation, to the Public Sector Integrity Commissioner (PSIC), or, in a real emergency, straight to the public. Each route has its own conditions.
- Your senior officer. Every federal organisation names one to receive and handle disclosures. You can also tell your own supervisor.
- The Commissioner. An independent agent of Parliament. They take disclosures from across the public service and look into them.
- The public. Open only in an emergency, and only when strict tests are met.
Going public is the narrow exception, not a first step. A public servant may skip the internal routes and speak to the public only when there is no time to wait and the wrong is grave. The law spells out just when.
"A disclosure that a public servant may make under sections 12 to 14 may be made to the public if there is not sufficient time [...] and the public servant believes on reasonable grounds that the subject-matter [...] constitutes a serious offence [...] or [...] an imminent risk of a substantial and specific danger to the life, health or safety of persons, or to the environment."
Section 16, Public Servants Disclosure Protection Act
Whichever route you pick, the law tells the people handling your report to protect your identity and keep the file confidential. That duty runs through the whole process. It is meant to make a public servant feel safe enough to come forward in the first place.
How do you set up the internal disclosure system?
The Act puts the duty at the top of each organisation. Every chief executive must build internal steps to handle disclosures and name a senior officer to run them. The Treasury Board sets a code of conduct that frames the whole system across government.
The senior officer is the day-to-day contact. They take reports, look into them, and report back to the person who spoke up. A small organisation can borrow the senior officer of a larger one. That way no office is left without a route.
WeMoral gives an employer the confidential reporting channel the PSDPA never forces a private company to build. A worker files in writing or by voice, with a name or without, and the report stays sealed to the one person you put in charge. Every action carries a timestamp, so the record holds up if a dispute ever reaches a court. It runs as tamper-evident whistleblowing software with nothing to install. Our guide shows how to stand up an internal channel from scratch.
What happens after the Commissioner gets a report?
The Commissioner reviews the disclosure and can open an investigation. The aim is to resolve the issue, often in an informal way. The office can ask for documents, talk to witnesses, and dig into what went on. The person who came forward is kept in the loop as it runs.
If the Commissioner finds a wrongdoing, they write it up. They send findings and recommendations to the chief executive of the organisation at fault. Here sits a real limit of the law. The Commissioner can advise a fix, but cannot force one. The power stops at a recommendation.
A founded case does go on the public record. The Commissioner lays a case report before Parliament that names the organisation and sets out the wrongdoing. That report is the main way the law brings a proven wrong into the open.
An investigation also has limits. The Commissioner must drop a case that another law handles better, or that is stale, or that was not raised in good faith. So not every disclosure ends in a finding, and many close with no wrongdoing named at all.
How are whistleblowers protected from reprisal?
Once a public servant makes a protected disclosure, the law bans any payback. A reprisal is any punishment aimed at the person for speaking up or for helping an investigation. The ban is wide. It reaches threats too, not just acts already carried out.
"[R]eprisal means any of the following measures taken against a public servant because the public servant has made a protected disclosure or has, in good faith, cooperated in an investigation [...]: a disciplinary measure; the demotion of the public servant; the termination of employment [...]; any measure that adversely affects the employment or working conditions of the public servant; and a threat to take any of those measures."
Section 2, Public Servants Disclosure Protection Act
A worker who believes they faced a reprisal has 60 days to act. They file a complaint with the Commissioner, who looks into it and can carry the case forward. The clock is tight. A public servant who is punished has to move fast.
The Commissioner does not have to rush to a hearing. They can first try to settle the complaint through conciliation, a guided talk between the two sides. If that fails, the case moves up to the Tribunal for a ruling.
The Public Servants Disclosure Protection Tribunal is what sets this law apart. A panel of Federal Court judges, it can order remedies for the whistleblower. It can give them their job back, award compensation, and pay for the fight. It can also order discipline against the people who took the reprisal. Few whistleblower laws let a body punish the retaliator directly.
What are the penalties?
The Act backs its bans with criminal penalties. Knowingly taking a reprisal, lying to an investigator, blocking the Commissioner, or destroying a document are all crimes. A conviction can bring a fine, prison, or both.
| Offence | Maximum penalty |
|---|---|
| Reprisal, obstruction, a false statement, or destroying a document, tried as an indictable offence | $10,000 fine, 2 years in prison, or both |
| The same offences, on summary conviction | $5,000 fine, 6 months in prison, or both |
These are the Act's own crimes, set out in sections 40 to 42.3. They sit on top of any discipline an organisation hands out. They also sit on top of any other law the act might break.
Why is the law seen as weak?
For all its structure, the PSDPA has a poor track record. Public servants use it rarely. Fewer still see a wrongdoing confirmed. Critics across Parliament and the public service rank it among the weakest whistleblower laws in the developed world.
The numbers are stark. The Commissioner's office has found a founded case of wrongdoing in only about 3% of the disclosures it received. Many public servants say they fear coming forward at all. You can read how a disclosure is handled at the Office of the Public Sector Integrity Commissioner.
The flaws are well documented. In 2017 a House of Commons committee ran a full review. It heard 52 witnesses and unanimously called for sweeping change in 15 recommendations. Governments since then made a few small tweaks but passed no new law. A task force was set up in 2022, and the core fixes are still waiting.
There is no reward, either. Unlike the United States, Canada pays a public-sector whistleblower nothing for coming forward. Outside the public service, the sole federal protection is section 425.1 of the Criminal Code. It makes it a crime for an employer to punish a worker who reports an offence to the police, with up to five years in prison. In practice it is almost never used. Each province then adds its own public-sector and labour rules, so the wider map is a patchwork. Whistleblower advocates have pushed for a single, stronger law for years. For now, how well you are protected depends on your employer and your province.
So Canada has all the machinery. It has a commissioner, a tribunal, and criminal penalties. Yet the people it is meant to protect mostly stay silent or go unheard. The gap is not the words on the page. It is whether a public servant trusts the system to stand behind them once they speak. Until reform closes that gap, the Act's promise stays mostly on paper.
Legal advisor specializing in business, commercial and IP law. Writes on whistleblower legislation, the EU Directive, and implementing reporting procedures.