Our role

We try to guarantee that we treat anyone that contacts us with confidentiality - unless you choose to disclose your identity to the firm concerned, we will make sure that it is protected, unless a court asks us to provide this information.

We will respond to everyone that contacts us, unless we think your confidentiality would be undermined or you have not provided contact details.

We also provide as much feedback as we can, although the confidentiality restrictions of UK and European law mean that this can be fairly limited.

How we use information

We will:

  • protect all information we receive and won’t reveal your existence or identity unless we are told to do so by law
  • confirm in writing that we have received your information (normally within five days) and that we have passed it onto one of our teams for further assessment
  • store your information on a secure database and (in most cases) sanitise it before we distribute it. It may not be possible if, for example, you are so closely involved in the activities reported that attempting to hide your identity would mislead our staff or cause confusion
  • tell you after assessing the information if we are considering further action or not, and if there is any publicly reported action

How we will respond

Our teams that supervise, authorise and investigate regulated firms or individuals will:

  • look at the information and decide if we will take further action
  • look at any other supporting information, as well as any ongoing or thematic work
  • contact you if we need more information (unless you have asked us not to or we think it is unsafe to do so)

Where the information is useful but might not lead to any further activity at the time, we will store it securely where it can be retrieved and used if things change.

Public information

Cases that result in prosecutions, fines or bans will normally be made public.

Where we can publish outcomes of cases, and where your information has helped us, we will normally let you know and thank you for your help.

However, in most cases we can address wrongdoing by intervening early on with corrective advice.

We can’t…

  • ​tell you what action we have decided to take, in most cases (although we aim to be as transparent as possible) – this could be for reasons of information sensitivity, our policy and various UK and European law restrictions
  • provide regular updates about the progress of action resulting from information received (but may be able to provide information later on a case by case basis, or if a public announcement is made)

Sharing information

We have agreements with other organisations about the information we share with them, especially the Prudential Regulation Authority (PRA) as we jointly regulate many firms.

With information that may be of interest to other regulators and government agencies, we will share this where we can, but won’t mention that it came from a whistleblower (unless we legally have to).

If we or the PRA aren’t allowed to process any information (eg if it is relating to a crime) we will advise you to contact the police or the relevant regulator.