| name | whistleblower-protection-policy |
| title | Whistleblower Protection Policy |
| description | Drafts a U.S. whistleblower-protection policy for corporate and nonprofit organizations. Triggers when the user needs a whistleblower policy, retaliation-prohibition clause, hotline-reporting framework, compliance-ethics policy, or governance document addressing SOX, Dodd-Frank, OSHA, or state whistleblower statutes. |
| author | CaseMark |
| author_url | https://github.com/CaseMark/skills/tree/main/skills/legal/whistleblower-protection-policy |
| license | Apache-2.0 |
| version | 0.1.0 |
| execution_mode | open |
| jurisdiction | us |
| practice | employment |
| language | en |
| tags | ["corporate","drafting","memo"] |
Whistleblower Protection Policy
Produces a board-adoptable whistleblower policy with fill-in placeholders and U.S. compliance guardrails for public, private, and nonprofit entities.
Quick Start
Gather before drafting:
- Org profile — legal name, entity type (public/private/nonprofit), governing state, reporting contacts.
- Statute applicability — SOX, Dodd-Frank, OSHA, False Claims Act, state statutes.
- Governance stack — existing code of conduct, handbook, grievance/investigation policies.
- Administration model — who receives reports, investigates, and oversees outcomes.
- Channel preferences — email, portal, hotline, written/verbal; tone and length targets.
- Adoption mechanics — signatory roles, effective-date process, review cadence.
If any input is missing, emit a short clarifying checklist before drafting.
Policy Sections (fixed order)
| # | Section | Required Content |
|---|
| 0 | Title block & version | Org name, version, effective date, scope entities |
| 1 | Introduction & commitment | Scope statement, non-retaliation promise, protected intent |
| 2 | Covered concerns | Serious-misconduct taxonomy, explicit non-coverage examples |
| 3 | Reporting procedures | Normal path, override path, anonymous option, channel placeholders |
| 4 | Investigation & resolution | Triage, assignment, timeline expectations, reporter updates |
| 5 | Anti-retaliation | Strict prohibition, protected-conduct examples, sanctions |
| 6 | Confidentiality & limits | Need-to-know bounds, legal exceptions, expectation management |
| 7 | Good-faith reporting | Reasonable-belief standard (no certainty burden), bad-faith consequences |
| 8 | Administration & governance | Board/committee roles, secure records, training, periodic review |
| 9 | External legal rights | Supplement-not-replace, no internal-prerequisite condition |
| 10 | Adoption & effective date | Board resolution, signature block, supersession language |
