Protection should not depend solely on employment status

By Gaurang Singh | Labour, Employment & Corporate Governance

SEO & Publication Details

Primary keyword: Whistleblower Protection in India

Secondary keywords: whistleblower protection for contractors India; whistleblower protection for interns India; Companies Act vigil mechanism; SEBI whistleblower policy; whistleblower retaliation India; Whistle Blowers Protection Act 2014

Suggested URL: /whistleblower-protection-contractors-interns-india/

Meta description: Can interns and contractors receive whistleblower protection in India? Understand the 2014 Act’s status, Companies Act Section 177, SEBI Regulation 22, retaliation and legal gaps.

1. Introduction

An intern notices that client information is being deliberately misused. A contractor discovers suspicious entries while working on a company project. Both believe that something may be seriously wrong, but reporting it could cost the intern a completion certificate or recommendation and the contractor a renewal, payment or future assignment. Neither may be a permanent employee, yet each may have learned about the alleged misconduct through their work.

This situation raises a practical legal question: does whistleblower protection in India depend on the label attached to a person’s working relationship? The answer is not a simple yes or no. India does not have one operative, comprehensive whistleblower statute that automatically protects every person connected with every public or private organisation. The position depends on the relevant law, regulatory framework, reporting channel, contract and facts.

The argument that protection should not depend solely on employment status is therefore best understood as a policy proposition not a statement that current Indian law already grants identical rights to employees, interns, consultants and independent contractors.

2. Who Is a Whistleblower?

In ordinary usage, a whistleblower is a person who reports suspected wrongdoing affecting an organisation, the public, investors or another legitimate interest. The legal category, however, varies across frameworks. A law may focus on corruption or misuse of public office; a company policy may cover fraud, accounting concerns or regulatory breaches; and a securities regulation may govern the vigil mechanism of a listed entity.

The relevant threshold is not simply whether a person has made an accusation. It is necessary to examine what was reported, to whom it was reported, the basis for the concern, and whether the report falls within the applicable statute, regulation or policy.

3. Whistleblowing vs an Ordinary Workplace Grievance

A complaint about leave, salary, workload, a difficult supervisor or an unfavourable performance review is not automatically whistleblowing merely because it is submitted through a whistleblower channel. It may be a genuine workplace grievance deserving attention, but it becomes a whistleblowing matter under a particular framework only if it meets that framework’s scope and reporting requirements.

By contrast, reporting suspected falsification of accounts, bribery, misuse of public office, deliberate concealment of a regulatory breach or fraud may fall within a whistleblowing policy or a relevant legal mechanism. The precise classification depends on the applicable rules and the facts.

Good-faith reporting also needs careful treatment. A report that cannot ultimately be substantiated is not, for that reason alone, necessarily malicious or knowingly false. Conversely, a knowingly fabricated allegation may be treated differently under the applicable policy or law. The reporter’s reasonable basis, conduct and the wording of the governing framework matter.

4. Why Interns and Contractors May Be Particularly Vulnerable

Interns, trainees, consultants and contractors may have access to internal systems, meetings, files or project information without having the same bargaining power as permanent staff. Their professional dependency can be acute: an intern may need a certificate or recommendation, while a contractor may depend on timely payment, contract renewal or future assignments. Former workers may also fear negative references or exclusion from professional networks.

These risks explain why retaliation should be assessed by its substance and context, rather than by looking only for a formal dismissal. But a harmful outcome after a report does not by itself prove retaliation. Timing, records, stated reasons, consistency of treatment and evidence connecting the report to the adverse action may all be relevant.

5. The Whistle Blowers Protection Act, 2014: Enacted but Not Yet in Force

The Whistle Blowers Protection Act, 2014 received Presidential assent and was published in the Gazette in May 2014. However, Section 1(3) makes commencement dependent on a notification by the Central Government. In a parliamentary answer dated 11 December 2025, the Government stated that no such commencement notification had been issued. It explained that amendments concerning disclosures affecting sovereignty, integrity and State security were considered necessary before commencement. The 2015 Amendment Bill later lapsed upon dissolution of the Sixteenth Lok Sabha. Accordingly, as of the date of this article, the 2014 Act must not be described as an operative general statutory protection for whistleblowers.

The Act was designed to establish a mechanism for public-interest disclosures concerning corruption or wilful misuse of power by public servants, and to provide safeguards for persons making covered disclosures. It was not designed as a universal private-sector whistleblower code for every employee, intern, consultant or contractor. Because the Act has not been brought into force, its proposed confidentiality and victimisation safeguards should be described as provisions of an enacted but uncommenced statute—not as presently enforceable protections under that Act.

In Dr. Mohammad Ajazur Rahman v. Union of India & Anr. (Delhi High Court, 23 February 2022, W.P.(C) 2471/2022; reported as 2022 LiveLaw (Del) 143), the Court declined to direct the Government to bring the Act into force, treating commencement of legislation as a sovereign legislative/executive function. The decision is relevant to the Act’s status; it does not establish that whistleblowers have no protection under any other law or mechanism.

6. Public-Sector Reporting: CVC and the PIDPI Resolution

The non-commencement of the 2014 Act does not mean that no public-sector reporting mechanism exists. Under the Public Interest Disclosure and Protection of Informers (PIDPI) Resolution, 2004, the Central Vigilance Commission (CVC) is the designated agency for specified written complaints alleging corruption or misuse of office involving employees of the Central Government and certain Central Government-controlled bodies and entities. The framework includes procedures for handling complaints and protecting the informant’s identity, subject to its rules and limits.

This mechanism has a defined sphere; it should not be treated as a general route for every private company dispute or every internship complaint. Before reporting, a person should check the CVC’s current instructions, eligibility, prescribed format and confidentiality requirements. Other departmental procedures, service rules, state-level arrangements and applicable criminal or administrative law may also be relevant depending on the person and the allegation.

7. Corporate Whistleblowing Under Section 177 of the Companies Act, 2013

Section 177(9) of the Companies Act, 2013 requires every listed public company and prescribed classes of companies to establish a vigil mechanism through which directors and employees can report genuine concerns. The Companies (Meetings of Board and its Powers) Rules, 2014, particularly Rule 7, set out the prescribed framework and identify relevant company categories, including companies that accept public deposits and companies that have borrowed more than the prescribed threshold from banks and public financial institutions.

Section 177(10) requires adequate safeguards against victimisation of persons who use the mechanism and provides for direct access to the Audit Committee Chairperson in appropriate or exceptional cases. The company must also disclose details of the mechanism on its website, if any, and in the Board’s report.

The wording matters. Section 177(9) expressly refers to “directors and employees” reporting genuine concerns, while subsection (10) refers to “persons who use such mechanism.” It would be unsafe to conclude that every independent contractor, consultant, intern or trainee automatically qualifies as an “employee” for subsection (9). Whether a particular person can use the mechanism may depend on the person’s legal status, the company’s policy, the mechanism’s terms and other applicable rules. The safeguard in subsection (10) is important, but it should not be read in isolation as creating an unlimited, independent employment-law remedy for every person affected by retaliation.

8. SEBI LODR Regulation 22: The Importance of “Any Other Person”

Regulation 22 of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015 requires a listed entity to formulate a vigil mechanism/whistleblower policy for directors and employees to report genuine concerns. It requires adequate safeguards against victimisation of directors, employees or “any other person” who uses the mechanism, and direct access to the Audit Committee Chairperson in appropriate or exceptional cases.

The phrase “any other person” is significant for contractors, consultants, interns and others who may not fall neatly within the ordinary employee category. It supports a broader protection within the regulatory mechanism for a person who actually uses it. However, the phrase should not be overstated: it does not automatically establish that every non-employee can use every listed entity’s mechanism in every circumstance, nor does it necessarily create a standalone employment-law cause of action for termination or non-renewal. The policy’s terms, the person’s use of the mechanism, the facts and the available regulatory or legal route must be examined.

For listed entities, Regulation 22 is therefore a central authority for this topic. It also demonstrates why “access to a reporting channel,” “protection against victimisation within the mechanism,” and “a separate remedy for retaliation” are related but distinct questions.

9. Contractual Protection for Contractors and Consultants

For contractors and consultants, the agreement may be an important source of practical protection. Depending on the negotiation and wording, a contract can include a right to report suspected misconduct, a non-retaliation commitment, an escalation route, confidentiality safeguards, compliance obligations, termination limits, payment protections and a dispute-resolution clause.

The exact drafting matters. A general obligation to comply with law or a broad confidentiality clause may not clearly protect a contractor who reports wrongdoing. The agreement should distinguish lawful reporting to an authorised regulator or competent authority from unauthorised disclosure of confidential information. Confidentiality provisions should not be assumed to prohibit every protected disclosure, but neither should a person assume that any disclosure is automatically protected. Legal advice may be necessary before sharing documents, personal data or commercially sensitive material.

A contractual promise can create rights between the parties, subject to its terms and applicable law. It does not, by itself, make a contractor an employee or confer every statutory employment protection on that contractor.

10. Institutional Safeguards for Interns and Trainees

Interns may be covered by an organisation’s whistleblower policy, internship terms, university rules or professional conduct procedures, but there is no basis for assuming that every internship automatically attracts the same statutory protections as employment. Organisations and universities should therefore state clearly whether interns and trainees can report concerns, how confidentiality is handled, who investigates allegations, how conflicts of interest are managed, and how certificates or recommendations will be issued fairly.

Useful institutional safeguards include an independent reporting channel, an escalation route outside the immediate supervisor’s chain, a documented investigation process, a prohibition on retaliatory conduct, and a review mechanism for decisions affecting certificates or recommendations. These are recommended practices; they should not be presented as a universal statutory duty unless a specific law, rule, contract or policy imposes that duty.

11. What Counts as Retaliation? A Fact-Sensitive Assessment

Potentially retaliatory conduct may include the following:

1. Termination or Non-Renewal

Contract terms, employment or service law, and the applicable policy or regulatory framework may be relevant. Timing alone is not conclusive.

2. Withholding Earned Payment

Contractual recovery and any applicable wage or payment statute may be relevant, depending on the individual’s status and the nature of the payment.

3. Negative References or Denial of a Completion Certificate

Internship terms, institutional rules, contractual obligations, and potentially other civil remedies may require examination, depending on the evidence and circumstances.

4. Blacklisting or Exclusion from Public Work

Applicable public procurement or service rules and principles of procedural fairness may need to be examined. No automatic conclusion follows.

5. Threats or Intimidation

Criminal-law or other protective remedies may be available, depending on the nature of the conduct and the available evidence.

6. Confidentiality or Data Disclosure Disputes

Contractual obligations, privacy and data-protection rules, and applicable protections for lawful reporting must be considered together.

12. Current Law and the Remaining Legal Gap

The existing framework is fragmented. The 2014 Act remains uncommenced; the CVC/PIDPI mechanism applies within a defined public-sector sphere; Section 177 of the Companies Act and Rule 7 of the 2014 Rules apply to specified companies and use employee/director terminology; and SEBI Regulation 22 adds the phrase “any other person” in relation to use of a listed entity’s mechanism. Internal policies and contracts may extend protection further, but their scope varies.

The legal gap is not that no protection can ever exist for an intern or contractor. Rather, there is no single, uniform rule guaranteeing every such person the same reporting access, confidentiality, anti-retaliation protection and remedy across all organisations. The practical outcome may depend on the organisation’s regulatory status, the terms of its policy, the individual’s relationship with it, the kind of disclosure and the evidence of retaliation.

13. What a Broader Framework Could Provide

As a matter of policy reform, India could consider a more coherent framework that defines protected persons broadly enough to address employees, former employees, interns, trainees, consultants, contractors and other people who obtain information through a work-related connection. A stronger framework could also provide clear standards for good-faith or reasonable-belief reporting; confidential and independent reporting channels; safeguards against termination, non-renewal, blacklisting and other professional retaliation; fair investigation procedures; and accessible remedies.

Any reform should also balance protection with safeguards against knowingly false or malicious allegations, while making clear that an unsubstantiated report is not automatically a malicious one. It should clarify how reporting channels interact with confidentiality, privacy, privilege and lawful disclosure obligations. These are proposals for reform, not a description of rights that already apply universally.

14. Practical Steps Before Making a Disclosure

• Read the applicable whistleblower policy, contract, internship terms and reporting instructions.
• Identify the correct channel such as the company’s designated officer, Audit Committee route, regulator or competent public-sector authority.
• Record relevant dates and preserve lawfully accessible evidence; do not access, copy or disclose information without authority merely to build a case.
• Keep the report factual: distinguish what you personally observed from what you suspect or have been told.
• Avoid public allegations or social-media disclosures where a confidential, prescribed channel exists; consider legal advice if confidentiality, privilege, personal data or personal safety is involved.
• If adverse action follows, retain the relevant communications, contract, policy and decision records and seek advice on the remedy available under the applicable framework.

15. Conclusion

Whistleblower protection in India cannot accurately be described as a single, universal statutory guarantee for every person who reports wrongdoing. The Whistle Blowers Protection Act, 2014 has been enacted but has not been brought into force. Public-sector PIDPI/CVC mechanisms, company-law vigil mechanisms, SEBI’s framework, internal policies and contractual terms operate within different scopes.

For contractors and interns, the key questions are therefore specific: which reporting channel was available, did the person fall within its scope, what safeguards applied, and what legal or contractual remedy is available for the alleged retaliation? The argument that protection should not depend solely on employment status remains a compelling policy position, particularly where people outside conventional employment can uncover serious wrongdoing. Turning that principle into reliable protection requires clear rules, accessible reporting channels and remedies that match the legal framework actually applicable.

Frequently Asked Questions (FAQs)

Is the Whistle Blowers Protection Act, 2014 currently in force?

No. As of the date of this article, the Central Government has not issued the commencement notification required by Section 1(3). It should not be described as an operative general statutory protection.

Can a contractor use a company whistleblower mechanism?

Possibly. The answer depends on the company’s policy, the mechanism’s terms, the applicable law and the contractor’s circumstances. SEBI Regulation 22 refers to safeguards for “any other person” who uses a listed entity’s mechanism.

Can an intern report corporate misconduct?

An intern can raise a concern through an available internal or regulatory channel, but the applicable policy and law determine access, confidentiality and protection. There is no automatic universal statutory rule covering every intern.

What does Section 177 of the Companies Act provide?

Section 177(9)–(10) requires specified companies to maintain a vigil mechanism for directors and employees to report genuine concerns and requires safeguards against victimisation of persons using it, with Audit Committee Chairperson access in appropriate or exceptional cases.

Does SEBI Regulation 22 protect people other than employees?

It requires safeguards against victimisation of directors, employees or “any other person” who uses the listed entity’s vigil mechanism. The scope of access and any separate remedy still depend on the applicable facts and framework.

Is every workplace complaint whistleblowing?

No. An ordinary dispute about pay, leave or supervision is not automatically a whistleblower disclosure. The report must be assessed against the relevant law or policy.

Does an unproven complaint mean the whistleblower acted maliciously?

Not necessarily. A report that cannot be substantiated is not automatically knowingly false or malicious. The reporter’s basis and conduct, along with the applicable policy or law, matter.

What should a person do if they face retaliation?

Preserve relevant records, review the applicable policy and contract, identify the correct escalation route, and obtain legal advice about the remedy available under the specific statutory, regulatory, contractual or institutional framework.

References & Primary Authorities

1. Whistle Blowers Protection Act, 2014, especially Section 1(3) (India Code / Gazette status)
2. Ministry of Personnel, Public Grievances & Pensions, PIB, “Parliament Question: Whistleblowers Protection Act, 2014” (11 December 2025)
3. Companies Act, 2013, Section 177 (India Code)
4. Companies (Meetings of Board and its Powers) Rules, 2014, Rule 7 (ICSI Act reference)
5. SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, Regulation 22 (version amended up to 8 September 2025)
6. CVC, Procedure for handling complaints under the PIDPI Resolution dated 21 April 2004
7. Dr. Mohammad Ajazur Rahman v. Union of India & Anr., W.P.(C) 2471/2022 (Delhi High Court, 23 February 2022), reported as 2022 LiveLaw (Del) 143

Editorial note: This article is for general legal information and academic discussion, not individual legal advice. The law and regulatory instruments should be rechecked immediately before publication for any subsequent amendments or commencement notifications.