Historically, the UAE Penal Code has always placed a positive obligation on all persons to report crime. However, this reporting requirement is difficult to enforce and does not address the sort of unethical practices or behaviours which are caught by whistleblowing laws in other jurisdictions. Recent changes to the law in the UAE go some way to encouraging employees to escalate and report corporate wrongdoing.
Financial Crime Law
The Financial Crime Law (Dubai Law No. 4 of 2016) introduced for the first time a degree of whistleblower protection where the disclosure is:
- true;
- related to an activity that may affect the economic security of Dubai; and
- made to the Dubai Centre for Economic Security (the Centre).
Where a disclosure satisfies the above criteria, the individual making it will be protected against prosecution and disciplinary action, unless proven to be providing false information. The Financial Crime Law expressly states that the reporter will be protected at their workplace and must not be subject to mistreatment or discrimination. In addition, an employee who makes a report to the Centre will not be deemed to be in breach of any non disclosure or confidentiality agreement signed and entered into with their employer.
The Centre was set up to combat financial crimes including corruption, fraud, bribery, embezzlement, destruction of public property, forgery, counterfeiting, money laundering and financing of terrorism and illegal organisations. This, coupled with the wide possible interpretation of "an activity that may affect the economic security of Dubai", means that there is a real possibility that an employee could use the Financial Crime Law to escalate an activity undertaken by their employer to the Centre.
The Financial Crime Law provides that the Centre can coordinate with international institutions in order to access and monitor information and data relating to matters which it is investigating for the purposes of national security. It could therefore potentially monitor and discipline Dubai companies and organisations who contravene provisions of the Financial Crime Law when operating outside Dubai. Energy and infrastructure companies, which invariably have operations and assets in different locations worldwide, should therefore be particularly aware of the possible extra-territorial reach of the Financial Crime Law.
DIFC Operating Law
The Dubai International Financial Centre (DIFC) free zone operates a common law jurisdiction and its own court system that sits separately to that of 'onshore' Dubai. Significantly, the DIFC Operating Law (DIFC Law No. 7 of 2018) expressly includes a positive obligation to disclose wrongdoing as well as whistleblower protections.
The law protects an employee who, in good faith, discloses to the DIFC Registry of Companies and information relating to a "reasonable suspicion" that a person contravened the DIFC Operating Law from:
- being subject to any contractual or civil liability; and
- being dismissed from their employment or otherwise suffering any detriment.
While the DIFC Operating Law does not extend outside of the DIFC's jurisdiction, it does put the concept of "whistleblowing" on the map and the majority of DIFC-based employers now have a whistleblowing policy and practice in place. Additionally, employers are increasingly seeking to include provisions in the employment contract placing a contractual obligation on their employees to report any wrongdoing of which they may become aware during their employment. However, these obligations are only useful if the employer has the necessary resources in place to support a whistleblowing policy.
Interaction with criminal and privacy laws
The UAE has far-reaching privacy laws which may conflict with the whistleblower protections. While an employer might be able to assure its employees that they will not be disciplined or dismissed from their employment for blowing the whistle, the same cannot be said in relation to any potential liabilities that may attach to the employee under the UAE's criminal law.
If, in disclosing an unethical practice, the employee simultaneously shares company confidential information, this could among to a crime under the UAE's Penal Code or, where the disclosure is made online, Cybercrimes Law. Additionally, a reporting employee who brings an individual or a company into disrepute may be accused of crimes of defamation. Sanctions for a breach of the UAE's privacy laws can include fines and imprisonment.
The Financial Crime Law simply states that an employee who files a report to the Centre will not be deemed to be in violation of "the provisions of the legislation". However, no reference is made to the UAE's criminal laws. The DIFC Operating Law only protects the employee against contractual or civil liability, not criminal liability.
Therefore, while employers can and should encourage their employees to speak out and report illegal or unethical practices and behaviours, they cannot protect their employees from any liability that might attach under the UAE's criminal laws. Protection against employment dismissal is different to a defamation claim. Employers must ensure that this balance is carefully considered in the wording of their whistleblowing policies.
Whistleblowing in Australia
Australia has recently introduced new laws to enhance protections for whistleblowers. The requirements are extensive, and the consequences for failing to comply can be dire. The law came into force on 1 July 2019.