Assignment – Business Ethics: Whistleblowing and Corporate Culture in Australian Banking

Introduction

The Royal Commission into Misconduct in the Banking, Superannuation and Financial Services Industry, chaired by Commissioner Kenneth Hayne, exposed fees charged to deceased customers, systemic mis-selling and a pattern of wrongdoing that had been known inside the banks long before it became public (Hayne 2019). Whistleblowers were central to that exposure, yet Australian banking culture had historically punished candour rather than protected it. This assignment analyses the relationship between whistleblowing protection and corporate culture in Australian banking after the Royal Commission. It examines the cultural diagnosis offered by the Commission and by the Australian Prudential Regulation Authority (APRA), applies three normative frameworks, utilitarianism, deontology and virtue ethics, to the decision to blow the whistle, evaluates the 2019 whistleblower reforms to the Corporations Act 2001 (Cth), discusses the Commonwealth Financial Planning case, models an ethical decision-making process, and closes with recommendations. The central argument is that legal protection is a necessary but insufficient condition for ethical banking: protection changes the cost of speaking up, but only culture changes the likelihood that anyone will need to.

Corporate Culture in Australian Banking after the Hayne Royal Commission

Australian retail banking is highly concentrated, with the four major banks holding roughly three-quarters of household deposits, a structure that magnifies the social cost of cultural failure (Hayne 2019). Commissioner Hayne attributed the misconduct primarily to the pursuit of short-term profit at the expense of basic standards of honesty, and to remuneration systems that rewarded sales over service (Hayne 2019). The cultural dimension was examined most closely in APRA’s prudential inquiry into the Commonwealth Bank of Australia, which found a widespread sense of complacency, an insular culture that was slow to learn from mistakes, and an organisation in which internal warnings struggled to reach decision-makers (APRA 2018).

Whistleblowing sits at the intersection of these findings because it is the mechanism through which internal warnings become audible. Australian research shows that most wrongdoing is first reported internally, and that the treatment of the first report largely determines whether that employee, or anyone watching, reports again (Brown & Lawrence 2017). Where reporters experience victimisation or silence, information stops flowing upward and boards effectively govern blind (Near & Miceli 2016). The Australian Banking Association’s revised Banking Code of Practice commits signatory banks to ethical behaviour and to supporting staff who raise concerns, signalling recognition that a speak-up culture is a prudential asset rather than a reputational threat (Australian Banking Association 2021).

Normative Ethical Frameworks and the Decision to Blow the Whistle

Whistleblowing is conventionally defined as the disclosure by organisation members of illegal, immoral or illegitimate practices to parties who may be able to effect action (Culiberg & Mihelič 2017). Whether an employee ought to disclose, and how organisations ought to respond, can be evaluated through three classical normative frameworks (Crane et al. 2019). Table 1 compares their reasoning as applied to Australian banking.

Table 1: Comparison of normative ethical frameworks applied to whistleblowing in Australian banking

Utilitarian perspective

For the utilitarian, the rightness of disclosure turns on aggregate consequences. In banking the calculus will usually favour reporting: misconduct of the kind aired before the Royal Commission generated remediation obligations running to billions of dollars across the industry, alongside broader harm to customer trust (Hayne 2019). The framework’s weakness lies in its own arithmetic. Because the personal costs of reporting are certain and immediate while the public benefits are diffuse and probabilistic, a coolly utilitarian employee may rationalise silence in exactly the situations where reporting matters most (Crane et al. 2019). Utilitarian reasoning therefore supports strong institutional protections that rebalance the calculation, rather than reliance on individual heroism.

Deontological perspective

Kantian ethics grounds whistleblowing in duty rather than outcome. An employee who knows that client signatures are being forged, or that fees are being charged for services never provided, holds a duty of honesty that does not dissolve because disclosure is costly (Ferrell, Fraedrich & Ferrell 2019). Equally, an employer that victimises a discloser to protect its reputation treats that person merely as a means to institutional self-preservation, violating the requirement to respect persons as ends. Deontology therefore supplies the strongest moral foundation for unconditional legal protection. Its limitation is practical: it offers little help in ranking conflicting duties, such as loyalty to colleagues against fidelity to clients, where most real disclosure decisions are contested (Crane et al. 2019).

Virtue ethics perspective

Virtue ethics shifts attention from the act to the agent and the community that forms the agent. Speaking up requires courage, honesty and practical wisdom, and those dispositions are cultivated or corroded by organisational culture. The framework explains an otherwise puzzling observation from the Australian experience: banks subject to identical laws and codes produced very different conduct outcomes, because their internal cultures rewarded different characters (APRA 2018). Virtue ethics also warns against the corruption of language, where loyalty is invoked as a pseudo-virtue to suppress dissent. Its familiar limitation is indeterminate action guidance, which is why it is best used alongside, not instead of, the other two frameworks (Crane et al. 2019).

The Corporations Act Whistleblower Reforms

Before 2019, pt 9.4AAA of the Corporations Act 2001 (Cth) offered protection so narrow that it was almost never invoked: the discloser had to be a current employee, officer or contractor, had to identify themselves, and had to act in good faith. The Treasury Laws Amendment (Enhancing Whistleblower Protections) Act 2019 (Cth), operative from 1 July 2019, rebuilt the regime. Table 2 summarises the principal changes.

Table 2: Principal changes to whistleblower protection under pt 9.4AAA of the Corporations Act 2001 (Cth)

Three features matter most for banking culture. First, protected anonymity and the objective reasonable-grounds test remove the two most common bases on which earlier reports were deterred or dismissed. Second, the extension of protection to former employees, suppliers and relatives recognises that retaliation reaches beyond the payroll. Third, s 1317AI obliges every Australian bank, as a public company, to maintain a compliant whistleblower policy, with the Australian Securities and Investments Commission (ASIC) specifying how disclosures must be received, investigated and protected (ASIC 2019). ASIC’s later review of whistleblower programs found that stronger firms treat disclosures as free risk intelligence, route them to trained officers and report themes to the board, while weaker firms treat the policy as a filing-cabinet artefact (ASIC 2023). The contrast illustrates this assignment’s central claim: the statute sets a floor, not a culture.

Case Discussion: Whistleblowing inside Commonwealth Financial Planning

The experience of Jeff Morris, a financial planner within Commonwealth Financial Planning, remains the landmark Australian illustration. From 2008, Morris and a small group of colleagues reported serious adviser misconduct, including forged client documents and unsuitable switching into high-risk products, first internally and then anonymously to ASIC, which was slow to act (Ferguson 2019). Confronted with continuing inaction, Morris eventually disclosed to the press. The resulting investigative reporting triggered a Senate inquiry, a large customer compensation scheme, and momentum that contributed to the establishment of the Royal Commission (Ferguson 2019; Hayne 2019). Morris suffered sustained personal and career costs, precisely the form of detriment the 2019 reforms now penalise.

The three frameworks evaluate the case differently but converge on the same verdict. On utilitarian reasoning the disclosure was clearly justified: thousands of affected clients were ultimately compensated, and industry-wide deterrence followed, outweighing the concentrated private costs many times over. Deontologically, Morris discharged a duty of honesty that his employer was institutionally breaching, and the organisation’s treatment of internal warnings failed the requirement to treat both clients and staff as ends in themselves. Through a virtue lens, the case displays courage exercised despite, rather than because of, the surrounding culture, the very condition APRA later described as complacent and insular (APRA 2018). Under the current regime, Morris’s anonymous report to ASIC would attract statutory protection from the outset, and his media disclosure could have qualified as a public interest disclosure under pt 9.4AAA, a pathway that did not exist in 2008 (Corporations Act 2001 (Cth)).

Measuring the Speak-up Culture: Indicative Data

Because culture is difficult to observe directly, bank boards increasingly track reporting metrics as a proxy. Table 3 presents indicative figures for a hypothetical major Australian bank, constructed to reflect the post-reform pattern regulators describe (ASIC 2023).

Table 3: Indicative whistleblower reporting metrics, hypothetical major Australian bank, FY2020-FY2024

Two worked calculations frame the interpretation of Table 3. Growth in report volume across the period is (173 – 84) / 84 × 100 = 106.0 per cent, while the substantiation rate in FY2024 is 52 / 173 × 100 = 30.1 per cent. Rising volumes with a broadly stable substantiation rate are generally read as evidence of improving psychological safety rather than deteriorating conduct: employees are surfacing more of the same underlying issues, earlier (Brown & Lawrence 2017; ASIC 2023). The reverse pattern, falling volumes with rising severity, would suggest a chilled channel through which only the gravest matters pass. Reporting metrics therefore function as a cultural thermometer, provided boards resist the temptation to treat high volumes as a problem to be managed down.

An Integrated Ethical Decision-Making Process

Ethical decision-making models typically move from recognition of a moral issue through judgement to action, moderated by organisational factors such as culture and incentives (Ferrell, Fraedrich & Ferrell 2019). Figure 1 integrates that sequence with the three frameworks analysed above and with the statutory pathway now available to Australian bank employees. The process moves from establishing the facts, through testing the proposed disclosure against consequences, duties and character, to internal channels, escalating to ASIC or APRA where those channels fail or are unsafe, with review and support closing the loop.

The value of the model lies in step 3, where the frameworks operate as complementary tests rather than rivals: a disclosure that maximises net welfare, honours duties of honesty and expresses the character of a good banker passes all three; step 6 reminds the organisation that its obligations continue after the report is lodged.

Recommendations

Four recommendations follow from the analysis for Australian banks seeking to convert legal compliance into cultural capability:

1. Govern the channel at board level. Report whistleblowing volumes, substantiation rates and time-to-closure to the board risk committee each quarter, interpreted against the pattern shown in Table 3, so that falling volumes are investigated rather than celebrated (ASIC 2023).
2. Protect beyond the statute. Extend the s 1317AI policy to matters outside the statutory regime and monitor disclosers’ career progression for at least two years, addressing the slow-burn retaliation the Morris case exemplifies (Ferguson 2019).
3. Reward the virtue, not merely punish the vice. Recognise substantiated disclosures and constructive challenge in leadership assessment and remuneration frameworks, aligning incentives with the virtue-ethics insight that culture cultivates character (Crane et al. 2019).
4. Train for the decision, not the policy. Deliver scenario-based training built on the process in Figure 1 so that staff rehearse the judgement, escalation and support steps before they are ever needed (Ferrell, Fraedrich & Ferrell 2019).

Conclusion

The Hayne Royal Commission demonstrated that misconduct in Australian banking was, at its root, an information and culture problem: wrongdoing was known internally and went unheard. The three normative frameworks analysed in this assignment converge in condemning that state of affairs, though for different reasons, and each contributes something the others lack: utilitarianism justifies rebalancing the costs of disclosure, deontology grounds unconditional protection, and virtue ethics explains why formally identical banks behave differently. The 2019 reforms to the Corporations Act 2001 (Cth) substantially corrected the legal position, protecting anonymity, widening eligibility and compelling every bank to maintain a genuine disclosure pathway. Yet the Commonwealth Financial Planning case shows what individual virtue must achieve when institutions fail, and post-reform reporting data show what institutions gain when support is built deliberately. Whistleblower protection and corporate culture are therefore complements, not substitutes: the law lowers the price of courage, but only culture makes courage unnecessary by acting on the first quiet warning.

References

APRA (Australian Prudential Regulation Authority) 2018, Prudential inquiry into the Commonwealth Bank of Australia: final report, Australian Prudential Regulation Authority, Sydney.

ASIC (Australian Securities and Investments Commission) 2019, Whistleblower policies, Regulatory Guide 270, Australian Securities and Investments Commission, Sydney.

ASIC (Australian Securities and Investments Commission) 2023, Good practices for handling whistleblower disclosures, Report 758, Australian Securities and Investments Commission, Sydney.

Australian Banking Association 2021, Banking Code of Practice, Australian Banking Association, Sydney.

Brown, AJ & Lawrence, SA 2017, Strength of organisational whistleblowing processes: analysis from Australia and New Zealand, Griffith University, Brisbane.

Corporations Act 2001 (Cth).

Crane, A, Matten, D, Glozer, S & Spence, LJ 2019, Business ethics: managing corporate citizenship and sustainability in the age of globalization, 5th edn, Oxford University Press, Oxford.

Culiberg, B & Mihelič, KK 2017, ‘The evolution of whistleblowing studies: a critical review and research agenda’, Journal of Business Ethics, vol. 146, no. 4, pp. 787-803.

Ferguson, A 2019, Banking bad: whistleblowers, corporate cover-ups and one journalist’s fight for the truth, ABC Books, Sydney.

Ferrell, OC, Fraedrich, J & Ferrell, L 2019, Business ethics: ethical decision making and cases, 12th edn, Cengage Learning, Boston.

Hayne, KM 2019, Final report of the Royal Commission into Misconduct in the Banking, Superannuation and Financial Services Industry, Commonwealth of Australia, Canberra.

Near, JP & Miceli, MP 2016, ‘After the wrongdoing: what managers should know about whistleblowing’, Business Horizons, vol. 59, no. 1, pp. 105-114.

Treasury Laws Amendment (Enhancing Whistleblower Protections) Act 2019 (Cth).