The Whistleblower Protection Act 2010 (Act 711) gives a person who reports improper conduct to an enforcement agency three protections under Section 7: confidentiality of information, immunity from civil and criminal action, and protection against detrimental action (reprisal). But the protection is conditional. Under Section 11 an enforcement agency must revoke it if the whistleblower participated in the improper conduct disclosed, knowingly made a false statement, or filed a frivolous or vexatious report. Section 6 also confers no protection at all where the disclosure is specifically prohibited by another written law.
- Act 711 received Royal Assent on 2 June 2010, was gazetted on 10 June 2010, and came into operation on 15 December 2010 (P.U. (B) 537/2010).
- A disclosure must go to an enforcement agency (Section 6) — a body empowered to investigate — not to the media; the anti-graft agency MACC is the best-known channel.
- Section 7 grants three protections: confidentiality of information, immunity from civil and criminal action, and protection against detrimental action, which also extends to people related to the whistleblower.
- Section 11 lists six grounds on which the enforcement agency must revoke protection — the first being that the whistleblower took part in the wrongdoing.
- Section 6 gives no protection if the disclosure is specifically prohibited by any written law.
Who this applies to: Employees, company directors, compliance and integrity officers, in-house counsel, and anyone considering reporting corruption or misconduct in Malaysia.
On this page
Report a bribe at work and Malaysian law can keep your name secret, shield you from being sued, and make it unlawful for your boss to sack you for it. But step one wrong way — go to the press first, or turn out to have had your own hand in the scheme — and every one of those protections can be taken away. That is the deliberate design of the Whistleblower Protection Act 2010.
What does the Act actually protect?
Act 711 received Royal Assent on 2 June 2010, was published in the Gazette on 10 June 2010, and came into operation on 15 December 2010 (P.U. (B) 537/2010). Its stated purpose is to combat corruption and other wrongdoing by encouraging disclosures of improper conduct and protecting those who make them.
The trigger is a disclosure of improper conduct made to an enforcement agency — a body empowered to investigate the conduct. Under Section 6(1), a person may make a disclosure “based on his reasonable belief that any person has engaged, is engaging or is preparing to engage in improper conduct.” “Improper conduct” is defined in Section 2 as any conduct which, if proved, constitutes a disciplinary offence or a criminal offence. Because “disciplinary offence” is itself defined to cover breaches of discipline in a public or private body under a law, code of conduct, code of ethics, circular or contract of employment, the term reaches wrongdoing across both sectors. The anti-corruption agency, MACC (SPRM), is the channel most people use, but it is not the only one.
Once a disclosure is received, Section 7 confers three protections:
| Protection | What it means |
|---|---|
| Confidentiality of information (s. 8) | Your identity and the information you gave are kept confidential. |
| Immunity from civil and criminal action (s. 9) | You cannot be sued or prosecuted for making the disclosure. |
| Protection against detrimental action (s. 10) | No one may retaliate — dismissal, demotion, harassment, intimidation or the like — and this shield extends to people related to or associated with you. |
Section 7(2) adds that the protection is not weakened just because the disclosure never leads to any disciplinary action or prosecution of the person reported.
When does the protection disappear?
This is the part that catches people out. The protection is not absolute. Section 11(1) says the enforcement agency shall revoke whistleblower protection if, from its investigation, it forms the opinion that any of these apply:
- The whistleblower himself participated in the improper conduct disclosed;
- The whistleblower wilfully made a false material statement — one he knew or believed to be false;
- The disclosure is frivolous or vexatious;
- The disclosure principally questions the merits of government policy;
- The disclosure was made solely or substantially to avoid dismissal or other disciplinary action;
- The whistleblower commits an offence under the Act while making the disclosure.
The first ground is the well-known trap: you cannot use whistleblower status as a shield to escape responsibility for wrongdoing you were part of. If protection is revoked, the agency must give written notice (Section 11(2)), and the person can refer the decision to the court, which may order the protection preserved (Sections 11(3)–(4)).
What about going to the media first?
The Act protects disclosures made to an enforcement agency — not disclosures broadcast to the public. In June 2025 MACC stated plainly that “once information is made public before a report is submitted through proper legal channels, the protection no longer applies.” There is also a threshold limit in Section 6(1) itself: it confers no protection where the disclosure is specifically prohibited by any written law. In practical terms, the Act’s protections attach to a disclosure made to an enforcement agency and made before, rather than after, the information is put into the public domain.
What’s next
- Under the Act, the protections attach where a disclosure is made to a relevant enforcement agency (such as MACC) and before the information is made public.
- The MACC / SPRM overview describes the main agency that handles corruption disclosures.
- The Employment Act 1955 covers related protections and remedies relevant to reprisal in the employment context.
- Note that Parliament has been debating amendments to Act 711; the protections and grounds above reflect the Act as currently in force, not any proposed changes.
What protections does a whistleblower get?
Under Section 7, upon making a disclosure of improper conduct to an enforcement agency a whistleblower is conferred three protections: protection of confidential information (their identity is kept confidential), immunity from civil and criminal action, and protection against detrimental action such as dismissal, demotion, harassment or intimidation. The protection against detrimental action also extends to persons related to or associated with the whistleblower.
When does the whistleblower lose protection?
Section 11(1) requires the enforcement agency to revoke protection if it forms the opinion — from its investigation — that the whistleblower himself participated in the improper conduct disclosed, wilfully made a material statement he knew to be false, filed a frivolous or vexatious disclosure, principally questioned the merits of government policy, disclosed mainly to avoid dismissal or disciplinary action, or committed an offence under the Act while disclosing.
Does the Act protect me if I post it on social media first?
No. The Act protects disclosures made to an enforcement agency. In June 2025 MACC stated publicly that once information is made public before a report is submitted through the proper legal channel, the protection no longer applies. Report to the agency first.
What counts as 'improper conduct'?
Section 2 defines improper conduct as any conduct which, if proved, constitutes a disciplinary offence or a criminal offence. A 'disciplinary offence' is separately defined to cover breaches of discipline in a public or private body under a law, code of conduct, code of ethics, circular or contract of employment, so the term reaches a wide range of wrongdoing, from corruption to workplace misconduct.
The following are deliberately unstated or described only qualitatively until confirmed by a subject-matter expert:
- Commencement date 15 December 2010 and P.U. (B) 537/2010 reference — printed under the long title in the AGC reprint; confirm against the original commencement notification.
- Section 11(1) grounds and Section 11(2)-(4) procedure — confirm paraphrase against the current in-force text (the cited reprint is 'as at 31 August 2016').
- MACC June 2025 statement — confirm the quoted wording and context via a primary MACC release if available, not only the FMT report.
- Whether any post-2016 amendment to Act 711 has taken effect that changes the protections, Section 11 grounds, or the commencement position stated here.
Sources
- Whistleblower Protection Act 2010 (Act 711) — updated reprint as at 31 August 2016 — Attorney General's Chambers of Malaysia (Laws of Malaysia)
- Whistleblower protection only applies if procedures are followed, says MACC — Free Malaysia Today
Change history
| Version | Date | Change | By |
|---|---|---|---|
| 01.00 | 7 Aug 2026 | Approved and published. | — |