Richard Ceballos, a deputy district attorney in Los Angeles County, concluded that a search warrant affidavit contained serious misrepresentations. He told his supervisors, then wrote a memo recommending that the case be dismissed. His office prosecuted anyway. Ceballos said he was then reassigned, transferred to another courthouse and denied a promotion. In 2006 the Supreme Court ruled 5 to 4 against him.

The Court’s reason was his job. A public employee who speaks as part of his official duties is not speaking as a citizen, the majority held, so the First Amendment did not shield him. A lawyer who believes he has found a lie in his own office’s paperwork, and says so, has done what any institution should want. The law withdrew its protection at the moment he did his job well.

Whistleblower protection should follow the warning, meaning a reasonable belief in serious wrongdoing, wherever it is voiced and whoever voices it. Today it follows other things: the recipient of the report, the statute that names that recipient, and the title of the person who spoke. A worker who guesses wrong about any of them can lose everything.

The Court Sent Ceballos to the Statutes

The majority did not say that Ceballos deserved no protection. Justice Kennedy wrote that other law already shields public employees who expose wrongdoing, including federal and California whistleblower statutes, labor codes and the professional rules for government lawyers. On that view the First Amendment need not do the work, and whistleblower protection can be left to legislatures.

Three dissenters saw the weakness. Justice Souter, joined by Justices Stevens and Ginsburg, argued that an employee who exposes wrongdoing in the course of his duties should be able to ask a court to weigh his interest and the public’s against the employer’s. He called the statutes the majority relied on an inconsistent patchwork. Justice Stevens answered the question of whether such speech is ever protected with one word: sometimes.

How Whistleblower Protection Became a Test of Where You Spoke

Paul Somers, a vice president, told senior management about suspected securities violations and was fired. He never called the Securities and Exchange Commission (SEC), the federal regulator of the stock market. In 2018 the Court ruled unanimously for his employer in Digital Realty Trust v. Somers: the Dodd-Frank financial reform law protects only people who report to the SEC. Had he called the SEC before he was fired, Dodd-Frank would have covered him.

The Sarbanes-Oxley corporate accounting law does cover a report to a supervisor, but it sets a different trap. A worker must first file an administrative complaint with the Labor Department within 180 days, and the remedy is back pay with interest. Dodd-Frank allows a suit in federal court, a longer deadline and double back pay. The better remedy goes to the worker who reported outside the company.

Had he called the SEC before he was fired, Dodd-Frank would have covered him.

Even the question of who counts as an employee stayed open until 2014. In Lawson v. FMR the Court ruled 6 to 3 that Sarbanes-Oxley protects employees of private contractors to public companies. None of these cases turned on whether the warning was true, serious or sincere. They asked who spoke, to whom, and in what role. Whistleblower protection that turns on those questions shelters the careful and abandons the sincere.

Who Hears the Warning First

Fraud examiners keep score. In the Association of Certified Fraud Examiners’ 2024 study of occupational fraud, 43 percent of cases came to light through a tip, more than three times the share found by the next most common method. Employees supplied most of those tips. No other method came close.

Among the employees who bypassed the hotline, the largest group, 29 percent, took the matter to a direct supervisor. The first person to hear a warning is often a manager. Whistleblower protection that covers only a report to a regulator covers the exception. And under the Ceballos rule, the public employees whose jobs put them closest to the evidence, such as inspectors, auditors and government lawyers, stand on the weakest constitutional ground.

Both rules push the same way. Justice Stevens warned that the official-duties line gives employees an incentive to speak publicly before they speak to their superiors. The Dodd-Frank rule does the same in securities law: the only sure way to qualify is to go to the regulator first, past the compliance office the company built to hear the warning. Employers who value internal reporting pay the price.

For employers the lesson is practical. A compliance program that trains only the hotline staff has missed the manager who hears the warning first, and a manager who treats a complaint as an insult has already begun the retaliation the law is supposed to prevent.

The Hardest Objection Is the Alibi

The strongest objection comes from employers and judges, and it is practical. Once protection follows the content of the warning, any worker facing dismissal can say that he warned someone first. A weak performer has every reason to produce a complaint after the fact. A rule built on content needs courts that can tell a real warning from an alibi.

Two tools already exist. The first is the standard of reasonable belief, which asks whether a sensible person in the worker’s position could have believed the law was being broken; Sarbanes-Oxley already uses it. The second is proof. The worker must show that the report existed and came before the harm. The law need not protect a knowing falsehood, and it should not wait for the warning to prove correct.

The European Union adds a third tool. Under its 2019 directive on people who report breaches of Union law, once a reporter shows that she reported in line with the rules and then suffered a detriment, the person who took the action must prove it was unrelated to the report. The employer knows why it acted. The worker usually cannot see the decision file.

Whistleblower protection that punishes every wrong guess has its own price. A legal order that asks workers to be certain asks them to wait, and waiting is how small violations grow large. It teaches workers to stay silent until they are sure, and institutions that ignore warnings then learn of the problem only when it has become a scandal.

Employers Can Still Have Internal Reporting First

Employers also want problems raised inside the company before they reach a regulator, and the wish is reasonable. The same directive shows how to honor it. As its recitals explain, workers should generally try internal channels first when those channels work. They may go straight to authorities when internal reporting cannot be expected to work or when retaliation is a real risk, and public disclosure is protected when other routes fail or danger is imminent.

That model does not abolish judgment. It still asks whether the worker had reasonable grounds and followed a sensible order of escalation. What it refuses to do is make protection depend on a guess about which route the law would later call the right one. Whistleblower protection begins when the warning is given and extends to every route the worker had good reason to use.

Government employers raise a different concern: they must control what staff say as part of their duties. That is true of policy and performance, and free speech doctrine has long balanced the two. The Ceballos majority drew its line at speech made as part of the job, over four dissents. A narrower line, limited to a reasonable belief in serious wrongdoing, leaves employers free to discipline poor work.

Nor is a functional test too vague to use. In Burlington Northern v. White the Court held in 2006 that an employer’s action counts as retaliation if it could dissuade a reasonable worker from making a charge of discrimination, even when it happens outside the workplace. Courts apply reasonable-worker and reasonable-belief tests across employment law. A test about what a warning said and what a sensible worker could believe is no harder.

What Canada Learned From Building the Channel Well

Canada built its whistleblower protection channel with care. The Public Servants Disclosure Protection Act gives federal employees an internal route and an independent commissioner. Public disclosure is allowed only when there is no time to use those routes and the worker reasonably believes the matter is a serious offense or an imminent danger to life, health, safety or the environment, and a reprisal complaint must be filed within 60 days.

The channel is under strain. The commissioner’s office reported rising submissions and a backlog that was building. Of the wrongdoing investigations it completed in 2024-25, one produced a founded case tabled in Parliament. A careful design still leaves workers waiting.

Why Speaking Up Is Punished Before It Is Heard

Kate Kenny’s Whistleblowing: Toward a New Theory studied financial-sector whistleblowers in the United States, the United Kingdom, Switzerland and Ireland, many of them compliance officers. Drawing on Judith Butler and Michel Foucault, she argues that organizations classify a whistleblower’s statements as impossible speech, and that retaliation follows from that classification. It helps explain why punishment so often arrives before an inquiry.

Emanuela Ceva and Michele Bocchiola ask in Is Whistleblowing a Duty? whether a worker who sees serious wrongdoing is obliged to speak. If speaking can be a duty, a legal order that conditions protection on the correct channel demands that workers discharge an obligation while guessing at the right recipient. Whistleblower protection that arrives only for the worker who found the right recipient fails the people it claims to serve.

A Whistleblower Protection Rule Built Around the Warning

The United States protects by statute and recipient. Canada protects through a designated channel with a narrow public exit. The European Union starts from whether the worker had reason to believe the warning. Only the third design makes whistleblower protection depend on what the worker saw. A workable rule can borrow from all three, because each of its parts already exists somewhere in law or practice.

Protection attaches when a worker reasonably believes that the law is being broken or that serious danger exists, whatever the worker’s job. It covers a report to anyone positioned to act: a supervisor, a compliance officer, a regulator, a legislator and, once other routes fail or time runs out, the press. Once the worker shows a report and a harm, the employer must prove the action had another cause.

In practice that means one definition of protected disclosure, written once and applied across securities, workplace and public-sector statutes. Legislators could keep specialized remedies and deadlines. They would lose the specialized addresses, which add procedure without adding any reason to believe the warning. The rule has limits. It does not shield a worker from discipline for poor work, and it does not protect a report the worker knew to be false.

What Ceballos Would Have Had

Apply that rule to Ceballos. A defense attorney had challenged the affidavit, and Ceballos reviewed the case himself before he concluded that it contained serious misrepresentations. The trial court later rejected the challenge. A reasonable-belief standard asks whether a sensible deputy with that file in hand could have believed what he believed, whether or not a judge later agreed. Whistleblower protection would have followed him.

Retaliation is a quiet form of censorship, and the law that decides which speech is protected should ask what a worker said and why before it asks which door she used. Ceballos read an affidavit, saw misstatements and said so. The only question the law needed to ask was whether he had reason to believe it.