# Whistleblower Protection Act 2010: What It Covers and Its Limits

> Malaysia's Whistleblower Protection Act 2010 (Act 711) shields people who report improper conduct to an enforcement agency with confidentiality, immunity and protection against reprisal, but the protection collapses if the whistleblower took part in the wrongdoing, went public first, or otherwise falls foul of Section 11.

- Category: law
- Language: en
- Status: published
- Updated: 2026-08-07
- Canonical: https://negaraku.md/en/law/whistleblower-protection-act-2010

---

Report a bribe at work and Malaysian law can keep your name secret, shield you from being sued, and make it unlawful for your boss to sack you for it. But step one wrong way — go to the press first, or turn out to have had your own hand in the scheme — and every one of those protections can be taken away. That is the deliberate design of the Whistleblower Protection Act 2010.

## What does the Act actually protect?

Act 711 received Royal Assent on 2 June 2010, was published in the Gazette on 10 June 2010, and came into operation on 15 December 2010 (P.U. (B) 537/2010). Its stated purpose is to combat corruption and other wrongdoing by encouraging disclosures of improper conduct and protecting those who make them.

The trigger is a **disclosure of improper conduct** made to an **enforcement agency** — a body empowered to investigate the conduct. Under Section 6(1), a person may make a disclosure "based on his reasonable belief that any person has engaged, is engaging or is preparing to engage in improper conduct." "Improper conduct" is defined in Section 2 as any conduct which, if proved, constitutes a **disciplinary offence or a criminal offence**. Because "disciplinary offence" is itself defined to cover breaches of discipline in a public or private body under a law, code of conduct, code of ethics, circular or contract of employment, the term reaches wrongdoing across both sectors. The anti-corruption agency, MACC (SPRM), is the channel most people use, but it is not the only one.

Once a disclosure is received, Section 7 confers three protections:

| Protection | What it means |
|---|---|
| Confidentiality of information (s. 8) | Your identity and the information you gave are kept confidential. |
| Immunity from civil and criminal action (s. 9) | You cannot be sued or prosecuted for making the disclosure. |
| Protection against detrimental action (s. 10) | No one may retaliate — dismissal, demotion, harassment, intimidation or the like — and this shield extends to people related to or associated with you. |

Section 7(2) adds that the protection is not weakened just because the disclosure never leads to any disciplinary action or prosecution of the person reported.

## When does the protection disappear?

This is the part that catches people out. The protection is **not** absolute. Section 11(1) says the enforcement agency **shall revoke** whistleblower protection if, from its investigation, it forms the opinion that any of these apply:

- **The whistleblower himself participated** in the improper conduct disclosed;
- The whistleblower **wilfully made a false material statement** — one he knew or believed to be false;
- The disclosure is **frivolous or vexatious**;
- The disclosure **principally questions the merits of government policy**;
- The disclosure was made **solely or substantially to avoid dismissal or other disciplinary action**;
- The whistleblower **commits an offence under the Act** while making the disclosure.

The first ground is the well-known trap: you cannot use whistleblower status as a shield to escape responsibility for wrongdoing you were part of. If protection is revoked, the agency must give written notice (Section 11(2)), and the person can refer the decision to the court, which may order the protection preserved (Sections 11(3)–(4)).

## What about going to the media first?

The Act protects disclosures made to an enforcement agency — not disclosures broadcast to the public. In June 2025 MACC stated plainly that "once information is made public before a report is submitted through proper legal channels, the protection no longer applies." There is also a threshold limit in Section 6(1) itself: it confers no protection where the disclosure is **specifically prohibited by any written law**. In practical terms, the Act's protections attach to a disclosure made to an enforcement agency and made before, rather than after, the information is put into the public domain.

## What's next

- Under the Act, the protections attach where a disclosure is made to a relevant enforcement agency (such as MACC) and before the information is made public.
- The [MACC / SPRM](/en/law/macc-sprm) overview describes the main agency that handles corruption disclosures.
- The [Employment Act 1955](/en/law/employment-act-1955) covers related protections and remedies relevant to reprisal in the employment context.
- Note that Parliament has been debating amendments to Act 711; the protections and grounds above reflect the Act as currently in force, not any proposed changes.

## Sources

- Whistleblower Protection Act 2010 (Act 711) — updated reprint as at 31 August 2016 — https://lom.agc.gov.my/ilims/upload/portal/akta/LOM/EN/5.%20Act%20711%20-%2030.10.2016.pdf (Attorney General's Chambers of Malaysia (Laws of Malaysia))
- Whistleblower protection only applies if procedures are followed, says MACC — https://www.freemalaysiatoday.com/category/nation/2025/06/20/whistleblower-protection-only-applies-if-procedures-are-followed-says-macc (Free Malaysia Today)

---
Source of truth: https://github.com/negaraku-md/NegaraKu.md
License: CC BY-SA 4.0