Japanese whistleblower protection law adds criminal penalties

Japan has protected whistleblowers since 2006 through a single national statute, the Whistleblower Protection Act. For its first two decades the law was gentle. It could void a retaliatory dismissal, yet it never punished the employer behind it. A reform taking effect on 1 December 2026 finally gives the law teeth.

What does Japan's Whistleblower Protection Act protect?

The Act protects a worker who reports a crime or a legal breach at their job, as long as the report is honest and serves the public. The protection is narrow by design. It only covers reports about the roughly 490 laws listed in the Act's appended table, from the Penal Code to food-safety, financial, and environmental rules. A general "any wrongdoing" complaint does not qualify.

The table covers two kinds of breach. The first is a criminal act under a listed law. The second, added in 2020, is conduct that draws an administrative fine under those same laws. That second category widened the law's reach well beyond outright crime. Even so, a worker must still point at a specific listed law. A general moral wrong is not enough.

The law's own term for a protected report is a "public interest disclosure". It has to point at a real breach of a listed law, and it has to be filed in good faith. A hunch, a rumour, or a purely personal grievance with the boss doesn't clear that bar, even when the worker feels sure they're right.

The law protects a worker by cancelling the retaliation itself. A dismissal handed to a worker because they reported is simply void, and a court can order the employer to treat the job as if it was never lost.

"If a whistleblower is dismissed by the business operator [...] on the basis of whistleblowing [...] the dismissal is to be void [...]."
Article 3, Whistleblower Protection Act

Japan hands the whole system to a surprising body: the Consumer Affairs Agency (CAA), the same regulator that polices product labels and consumer fraud. The law grew out of a run of consumer-safety cover-ups in the early 2000s, so its home fits its history. You can read the current Japanese text on the government's e-Gov law portal, and an official English version through the Japanese Law Translation database. For how other countries frame the same duty, see our list of whistleblowing laws by country.

Who is protected, and who was left out

The Act reaches well beyond a company's permanent staff. Since the 2020 reform, it covers employees, dispatched agency workers, contractors in the supply chain, company officers, and former staff who left within the past year. Anyone in that group who reports in good faith is shielded.

The shield is not unconditional. A report made to extort, to smear, or for any other wrongful purpose falls outside the law. Reporters are also asked to show some care for the people they name.

"Any worker who conducts whistleblowing [...] must make efforts not to damage the legitimate interests of others and the public interest."
Article 8, Whistleblower Protection Act

The 2020 reform also gave two groups a money remedy the first law lacked. A company officer fired for a report can sue for damages, since an officer can't simply be handed their old seat back the way an employee can. And a worker sued by their own employer over a protected report can't be forced to pay for it.

One large group still sat outside the fence: freelancers and sole proprietors who work under a service contract. Japan's economy leans heavily on such workers, yet a self-employed contractor who exposed fraud had no cover under the Act. The 2026 reform closes that gap.

What are the three reporting routes?

The Act gives a worker three places to take a report, and it asks for more proof as the audience widens. An internal report is the easiest to protect. Going public is the hardest. Each route sets its own bar.

• Inside the company: a report to the employer or its named contact is protected when the worker simply believes a covered breach is happening or about to happen. This is the lowest bar.
• To a regulator: a report to an administrative body with power over the issue is protected when the worker has reasonable grounds to believe it, and files a few basic written details.
• To the outside world: a report to the press, a union, or the public is protected only with reasonable grounds plus an extra condition, such as a fear of retaliation, a risk that evidence will be destroyed, or a danger to someone's life.

The clock adds one more trigger. If a worker reports inside the company but hears nothing about an investigation within 20 days, the law then treats a report to the outside as protected. Silence, in other words, opens the door. The ladder pushes reports inward first, and opens the outer routes only when the inside channel looks unsafe or useless.

How do you set up the internal reporting system?

If your business employs more than 300 people in Japan, an internal reporting system is not optional. The 2020 reform made it a legal duty. You must build a channel to receive and handle reports, and you must name the staff who run it, known as designated response persons.

Those designated handlers carry a personal duty of secrecy. If one of them leaks information that identifies a reporter, that leak is a crime. The CAA publishes binding guidelines on how the system should run, and smaller firms with 300 staff or fewer are told to make the same effort. You can follow the agency's guidance from the CAA's whistleblower pages.

The employer also owes the reporter an answer. Once a written report comes in, the business has to tell the worker whether it acted and what it found. A channel that swallows reports in silence breaks the law.

WeMoral answers the internal-system duty the 2020 reform placed on larger employers. Each report reaches only the response person you designate, and it stays encrypted end to end. So the identity the Act tells that handler to guard never spreads. That protection earns its keep here, because a handler who leaks a reporter's name commits a crime. Workers can file by name or anonymously, and every action is timestamped. Your record is then ready the day the Consumer Affairs Agency asks how a case was handled. Run it as self-hosted whistleblowing software, or hand the response seat to us. Specialist advisers can hold that response seat for their clients too, as our referral partners. Our guide shows how to get an internal reporting channel running.

Does Japan reward whistleblowers or take anonymous reports?

No, Japan pays no reward for a tip. In the United States, a whistleblower can win a slice of the money the government claws back. Japan's law offers legal protection but no financial reward. It also does not force an employer to accept anonymous reports, though the CAA's guidelines strongly urge them to allow it.

That gap has real weight, because fear of exposure is the main reason Japanese workers stay quiet. If a report can be traced back, the secrecy duty on the handler is the only wall between the reporter and payback. A channel that accepts anonymous reports removes the risk at the source, which is why the guidelines push for one even though the statute stops short of a hard rule.

What happens to employers who retaliate?

For most of the law's life, the honest answer was: not much. A court could void the dismissal and put the worker back, but the employer faced no fine and no criminal record. The one punishment written into the Act was a small fine for a designated handler who leaked a reporter's identity.

"[T]he business operator [...] must not conduct any disadvantageous treatment such as demotion or a salary cut to a whistleblower who is or was its employee [...]."
Article 5, Whistleblower Protection Act

The rule was clear, but it lacked bite. Few workers even knew the law existed, and fear of payback kept many of the rest quiet. The 2025 amendment changes that by attaching real penalties. The table below shows what an employer risks, and when each penalty starts.

What the 2025 amendment changes

The 2025 amendment passed on 4 June 2025 and takes effect on 1 December 2026, the biggest change since the law began. Rather than leaning on nullification alone, it now punishes retaliation directly, and it widens who counts as a protected reporter.

The change with the widest reach is quieter than the fines. The reform flips the burden of proof. A dismissal or demotion handed out within one year of a report is presumed to be retaliation, and the employer must prove it was not. Under the old law, the worker had to prove the boss's motive, which was often close to impossible.

• Criminal penalties for retaliation, up to six months in prison or a ¥300,000 fine for the person responsible, and up to ¥30 million for the company.
• Freelancers and service-contract workers join the protected group, along with those whose contract ended within the past year.
• Employers can no longer dig to work out who filed a report without a good reason, and gag clauses that block lawful reporting are void.
• The CAA gains power to order fixes, demand reports, and inspect how a company runs its channel.

What should employers do before the 2026 rules bite?

Any business with staff in Japan has until 1 December 2026 to get ready. The burden-of-proof change alone raises the stakes. The safest habit is to treat every step in a report as if a court will one day read it. A clean, dated record is the best defence a firm can hold.

• Check the headcount. More than 300 workers means the internal-system duty already applies, well before the 2026 rules land.
• Pick your designated response people, and lock down who can ever see a reporter's identity.
• Offer an anonymous route. The law stops short of demanding one, but it is the surest way to keep reports flowing.
• Log every report and every action, because the burden of disproving a retaliation claim now falls on the firm.

For twenty years, Japan's law asked employers to behave and, when they did not, it simply undid the damage after the fact. It rarely frightened anyone, awareness stayed low, and few workers trusted the channel. The 2026 reform is Japan's bet that punishing retaliation will finally get people to speak up, where undoing it after the fact never did. Whether a ¥30 million fine changes the maths in a Japanese boardroom is the question the next few years will answer.