The Good Board
Agenda · The board in distress

Whistleblower report arrives

A closed-without-investigation report is worse than no channel at all.

Status
First edition · 2026-05-05
Category
In distress
Last reviewed
2026-05-05

Note

Swiss whistleblower protection is not a single statute; the framework is composite and draws on employment law, sectoral supervision acts, and Art. 716a OR oversight duties.

If the clock is running now, call directly.

An anonymous note is posted in the general-secretariat inbox. An employment lawyer sends a letter describing a “pattern of conduct” her client has observed over three years. A submission lands on the board-portal whistleblower channel — thirty lines with names, dates, and a request for confidentiality. The trigger form varies; what does not vary is the moment of decision the board now faces. A whistleblower report closed without investigation — in the well-worn Delaware and Swiss experience alike — is worse for the company than a company that had no channel at all. The disclosure has happened; the record of closure without inquiry is the record.

1. The duties that bear on this

Oversight, not operations. The board’s Art. 716a(1)(5) OR Oberaufsicht over compliance with law extends to ensuring that credible reports of potential breach are investigated, not to conducting the investigation. The board’s function here is structural — it must ensure an investigation occurs, is adequately resourced, is free of conflict, and is reported back at an appropriate granularity.

Retaliation exposure. Swiss employment law and — where applicable — whistleblower-protection provisions under sectoral regimes (for example, FINMA-supervised institutions under FINMASA) treat retaliation against a whistleblower as a separate source of exposure. A company that investigates the underlying allegation and then dismisses the whistleblower compounds its original problem rather than solving it.

Parallel exposure may be running. The same facts that drive the report may already be known to a regulator, a foreign authority, or counsel to a shareholder. The time between report and investigation is time in which the company’s posture may be being established externally by others. A board that takes three weeks to decide on an investigation posture is a board whose investigation is in part being directed by the decisions of others.

2. The process

  1. Intake within twenty-four hours by a non-conflicted person — typically the audit-committee chair, general counsel if unconflicted, or the compliance officer on the condition that the implicated persons are not in the compliance officer’s reporting line.
  2. Preserve the report itself and the metadata — channel, timestamp, routing — in an auditable form. The report is evidence; treat it as such.
  3. Within forty-eight to seventy-two hours, triage: credibility on the face of the complaint, materiality if true, identification of who is implicated, identification of who in the company is conflicted from investigating.
  4. Commission an investigation of a scope and seniority proportionate to the allegation. Minor operational misconduct can be addressed by line management; allegations implicating senior executives or the board itself require external counsel and external fact-finders.
  5. Define, in writing, the investigation’s scope, reporting line, access rights, and timeline. Scope creep is the most common pathology of internal investigations — left undefined, they neither close nor expand usefully.
  6. Protect the whistleblower. Formal anti-retaliation measures — access limitations to the complaint’s contents, documented protection of the whistleblower’s employment position, communications discipline — are not optional.
  7. Report findings to the commissioning body with enough substance that remediation can be directed.

3. Questions to ask management

4. The record to leave

The defensible record is not a memo recording that the report was received and deemed unfounded. It is: intake log; triage memo; commission instruction to investigators (internal or external) with defined scope; investigator’s findings report; board or committee minute recording consideration of findings and direction of remediation; and — if the report is not substantiated — a memo explaining the basis on which the investigation closed. That memo is the exhibit that protects the board when the same facts resurface in a regulatory proceeding two years later.

5. Failure modes

Closure without investigation. The report is read, deemed implausible on its face, and filed. Two years later, a regulator subpoenas whistleblower channel records; the closure without investigation becomes Exhibit A for the oversight failure. The doctrine here is close to Marchand territory — see the comparative commentary at Marchand v. Barnhill — but the Swiss route under Art. 716a(1)(5) reaches the same conclusion on objective care standard, without the bad-faith gloss.

Investigation by the implicated. The head of a function investigates a report implicating the function. Findings are not credible externally; the company has to re-do the investigation under external counsel later, at greater cost and under a worsened narrative.

Retaliation the company did not mean to commit. The whistleblower is not dismissed but is removed from a high-visibility project, passed over at the next performance review, or asked to relocate. Each individual decision is explicable; in aggregate they document retaliation and create a second-order claim that frequently dwarfs the original matter.

Cognitive register. Whistleblower reports are filtered through a predictable set of biases. Motivated scepticism makes the board under-weight an allegation precisely because the consequences of believing it are costly — investigation, reputation, potentially a senior departure; the same report about a competitor would be treated as credible. Confirmation bias sets an “it’s probably nothing” frame early, which then survives contrary evidence. Social identity protection — the implicated executive is a long-standing colleague, the whistleblower a disgruntled employee — shapes which narrative feels true before any facts have been assessed. The formal triage protocol and the commissioning of external investigators for senior-executive allegations are structural answers to what is, underneath the process, a problem of motivated cognition.

6. See also