Australia Whistleblower Protection Standard

1. Introduction/Purpose


The Corporations Act 2001 Cth (Corporations Act) provides a consolidated whistleblower protection regime for Australia’s corporate sector. This Whistleblower Standard (the Standard) identifies:

  • the process for making a protected disclosure under the Corporations Act;
  • the protections available for individuals making a protected disclosure; and
  • how a disclosure will be investigated.

BNY Mellon recognizes the importance of identifying wrongdoing and the importance of having a safe and secure means for individuals to disclose wrongdoing. BNY Mellon is committed to meeting its legal and regulatory obligations, upholding its values and Code of Conduct and ensuring that individuals who disclose wrongdoing can do so with the confidence that they will be protected and supported.


2. Applicability and Scope


The Standard applies to the following entities in Australia 'BNY Mellon' or 'We':


The Bank of New York Mellon, Australia Branch (ARBN 84 084 066 419)

BNY Mellon Australia Pty Limited (ACN 113 947 309)

BNY Trust (Australia) Registry Limited (ACN 000 334 636)

BNY Trust Company of Australia Limited (ACN 050 294 052)

BTA Institutional Services Australia Limited (ACN 002 916 396)

GT Australia Nominees Limited (ACN 003 646 062)

Permanent Custodians Limited (ACN 001426384)

Eagle Investment Systems Australia Pty Limited (ACN 604 847 323)

Milestone Group Pty Limited (ACN 083 166 616)


3. Standard Statement(s)


You can make a disclosure under this Standard if you are, or previously have been any of the following:

  • A current or former officer or employee (e.g. permanent, part time, fixed-term, or temporary, interns, secondees, managers and directors) of any of the entities in Section 2;
  • A paid or unpaid supplier of services or goods to BNY Mellon including their employees (e.g. current and former contractors, consultants, service providers and business partners);
  • An associate of BNY Mellon (as defined in the Corporations Act); or
  • A relative, dependant or spouse of the individuals identified in the three items above

This Standard sets out the process and protections available to individuals who qualify for protection as a whistleblower under the Corporations Act.


3.1. Standard Details/Discussion


If you are an Eligible Whistleblower and you have a reasonable grounds to be concerned about:

  • actual or suspected misconduct; or
  • an improper state of affairs or circumstances including in relation to its tax affairs, (disclosable matters),

In relation to BNY Mellon or a related body corporate (including its employees or officers), you can make a disclosure under this Standard. You do not need to have proof that wrongdoing has occurred, and you will not be penalized for information that turns out to be incorrect. It is important to note that the conduct being reported does not have to amount to a contravention of applicable law. If you report a concern that is not a disclosable matter, you do not qualify for the protections under this Standard or under the Corporations Act.

Examples of wrongdoing:

  • Illegal conduct: for example theft, dealing in or use of illicit drugs, violence or threatened violence and criminal damage against property
  • Fraud, money laundering or misappropriation of funds
  • Bribes, including offering or accepting
  • Financial irregularities
  • Failure to comply with, or a breach of, legal or regulatory requirements
  • Unethical behavior or misconduct
  • Engaging in or threatening to engage in detrimental conduct against a person who has made a disclosure or is believed or suspected to have made, or be planning to make, a disclosure.
3.1.1. Excluded Matters


Personal work-related grievances


Personal work-related grievance will generally not qualify for protection under this Standard save in certain limited circumstances. Concerns about personal work-related grievances should be reported to your manager in the first instance. For further details, refer to the II-H-630.AU Grievance Procedure.


Concerns about personal work-related grievances should be reported to your manager in the first instance. For further details, refer to II-H-630.AU Grievance Procedure.


In some limited circumstances, disclosures relating to personal work-related grievances may qualify for protection. For example, where:


  • The personal work-related grievance includes information about misconduct, or information about misconduct includes or is accompanied by a personal- work-related grievance (a mixed report);
  • BNY Mellon has breached employment or other laws punishable by imprisonment of 12 months or more, engaged in conduct that represents a danger to the public, or the disclosure relates to information that suggests misconduct beyond the discloser’s personal circumstances;
  • You have suffered from or have been threatened with detriment or retaliation for making a disclosure; or
  • You seek legal advice or legal representation about the operation of the whistleblower protections under the Corporations Act.
3.1.2. Who can receive a disclosure?


To qualify for protection under this Standard and under the Corporations Act, you must make your disclosure directly to an Eligible Recipient1.


Eligible Recipients authorised to receive disclosures for BNY Mellon include the Ethics Office, Australia Whistleblower Protection Officers and Other Eligible Recipients:


(a) The Ethics Office


You can make a disclosure through the Ethics Help Line, operated by members of the Ethics Office or the Ethics Hot Line, an independent hotline workflow administrator. Reports made to the Ethics Help Line and Ethics Hot Line are taken seriously and investigated fully. You can remain anonymous and your confidentiality will be protected to the fullest extent possible.

Ethics Help Line

8:30- 5:00 EST Monday – Friday and can be accessed via phone, email or U.S. mail


Phone: 0011-800-710-63562




Mail: The Bank of New York Mellon
P.O. Box 535026
Pittsburgh, PA 15253-5026


Ethics Hot Line

24x7, 365 days of the year, has interpreting capabilities, and can be accessed via a website, by phone or by U.S. mail. Reports can be made anonymously


Phone: Outside the United States dial the AT&T Direct Access Number for your country and carrier, then 866-294-4696


Australia: Telstra 1-800-881-011; Optus 1-800-551-155


Web Report: (hosted on EthicsPoint’s secure servers and is not part of BNY Mellon’s web site or intranet).

(b) Australia Whistleblower Protection Officers


A Whistleblower Protection Officer is an individual with responsibilities for managing disclosures protected under this Standard. The following individuals are Whistleblower Protection Officers for BNY Mellon:

  • The Chief Risk Officer Australia can be contacted by email and by post:


(c) Other Eligible Recipients


There are other individuals who are eligible to receive disclosures and who are required to handle them in accordance with this Standard. This includes senior managers such as Directors, Accountable Persons under the Banking Executive Accountability Regime (and under the Financial Accountability Regime from 1 July 2022) and internal or external auditors. Milestone Australian employees can also escalate to a Milestone senior line manager and/or Executive/Board member. 


Ultimately, any disclosures received by these recipients will be referred to the Whistleblower Protection Officers for assessment and investigation. As such, we would encourage you to report matters directly to a Whistleblower Protection Officer or the Ethics Office to allow for prompt investigation


(d) Regulatory Bodies and Legal Practitioners


However, if you do not wish to raise your concern via any of the above, you may also make a protected disclosure directly to Australian Securities and Investments Commission (ASIC), Australian Prudential Regulation Authority (APRA) or another Commonwealth body prescribed by regulation and still qualify for protection under the Corporations Act, or to a legal practitioner for the purposes of obtaining legal advice or representation in relation to the operation of the whistleblower provisions in the Corporations Act.


(e) Journalists and Parliamentarians - public interest and emergency disclosures


In certain circumstances, disclosures made to journalists or parliamentarians will also qualify for protection under the Corporations Act. These are referred to as “public interest disclosures” and “emergency disclosures”. It is important to understand the criteria for making these types of disclosures2 and we recommend that independent legal advice be sought before they are made.


3.1.3 Anonymous disclosures


You may choose to remain anonymous while making a disclosure, during the investigation and after the investigation is finalized and may refuse to answer questions you feel would reveal your identity. While it is not a requirement to share your identity, it is encouraged to make it easier to address and investigate your concerns. In the event of an anonymous disclosure, we will take all reasonable steps to preserve your anonymity.


There are various mechanisms available for protecting your anonymity when making a disclosure under this Standard including:

  • Communicating through the Ethics Centre;
  • Using an anonymized email address;
  • Adopting a pseudonym for the purpose of your disclosure.

Disclosures which are made anonymously will still be protected under this Standard and under the Corporations Act. If you wish to remain anonymous when making a disclosure you should, where possible, maintain on going communication with BNY Mellon so that we may seek further information or clarification to assist us in the investigation of your concerns and provide you with feedback and updates regarding the progress of any investigation and outcomes.


3.1.4. Legal Protections


In order to be eligible for the protections under this Standard and under the Corporations Act you must:


(a)  be an Eligible Whistleblower;

(b)  make an eligible disclosure to an Eligible Recipient;

(c)  be acting honestly with a genuine or reasonable belief that the information in the allegation is true or likely to be true; and

(d)  have not engaged in serious misconduct or illegal conduct in relation to the eligible disclosure.


The protection under this Policy and under the Corporations Act apply not only to disclosable matters made to Eligible Recipients but also to:


(a)  disclosures made to legal practitioners for the purpose of obtaining legal advice or representation regarding the operation of whistleblowing provisions under the Corporations Act;

(b)  disclosures to regulatory and other external bodies;

(c)   “public interest” and “emergency” disclosures that are made in accordance with the Corporations Act


You can still qualify for the protections under this Standard even if your disclosure turns out to be incorrect or your legal practitioner has advised you that your disclosure does not qualify for protection under the Corporations Act.


Identity Protection (Confidentiality)


We have a legal obligation to protect the confidentiality of your identify, including information that is likely to lead to your identification. Generally, we cannot disclose your identity or disclosure without your consent however, your identity or identifying information may be reported to regulatory authorities such as ASIC, APRA, or the Australian Federal Police, or to a legal practitioner (for the purposes of obtaining legal advice or legal representation). Furthermore, information contained in a disclosure can be disclosed without your consent if:

  • The information does not include your identity;
  • All reasonable steps have been taken to reduce the risk that you will be identified from the information; and
  • It is reasonably necessary for investigating the issues raised in the disclosure.

It is unlawful for a person to identify a whistleblower, or disclose information that is likely to lead to the identification of the whistleblower, outside of the circumstances listed above.


Protection from detriment


A person must not cause, or threaten to cause, detriment to a person because they have made, may make, proposes to make or could make, a disclosure that qualifies for protection under this Standard and the Corporations Act.  Such conduct is unlawful.


We have a zero tolerance for acts of retaliation and all steps necessary will be taken to protect you from detrimental conduct, or threats to cause detrimental conduct in relation to a disclosure you have made.

Examples: Prohibited detrimental conduct

  • Dismissal
  • Injury of an employee in his or her employment
  •  Alteration of an employee’s position or duties to his or her disadvantage
  • Discrimination between an employee and other employees of the same employer
  • Harassment or intimidation
  • Harm or injury, including psychological harm
  • Damage to a person’s property, reputation, business or financial position

Examples: Actions that are not detrimental conduct

  • Managing a discloser’s unsatisfactory work performance, if in line with the performance management framework
  • Administrative action necessary and reasonable for the purpose of protecting a discloser from detriment



Compensation and other remedies


If you suffer loss, damage or injury due to a disclosure, and we have failed to take reasonable precautions and exercise due diligence to prevent the detrimental conduct, you or any other employee or person may seek compensation and other remedies through the courts.


Protection from civil, criminal and administrative liability


You will be protected from civil, criminal and administrative liability in relation to your protected disclosure:


(a)   civil liability (eg any legal action against you for breach of an employment contract, duty of confidentiality or other contractual obligation);

(b)   criminal liability (eg attempted prosecution for unlawfully releasing information, or other use of your disclosure against you in a prosecution (other than making a false disclosure)); or

(c)   administrative liability (eg, disciplinary action for making the disclosure


However, it is important to note that these protections do not grant you immunity for misconduct that may be revealed from your disclosure.


3.1.5. Bank of New York Mellon Support


Identity protection (Confidentiality)


Should you wish to remain anonymous, all necessary steps will be taken to protect the confidentiality of your identity. All information received will be treated confidentially and sensitively. Any concern reported to the Ethics Office is taken seriously and investigated full. As detailed in the BNY Mellon Code of Conduct, the Ethics Office allows for anonymous reporting and will protect your confidentiality to the fullest extent possible.


The following steps will be taken in relation to disclosures handled by all other Eligible Recipients, including a Whistleblower Protection Officer. 

Steps to reduce the risk the discloser will be identified from the information provided in their disclosure

  • Your identity or information that would lead to your identification will not be shared without your consent, except in the case of the exceptions noted above;
  • Personal information or references to you witnessing an event will be redacted from your disclosure;
  • A gender-neutral term will be used;
  • You will be asked to help identify any parts of the disclosure you feel would identify you; and
  • Disclosures will be handled and investigated by a Whistleblower Protection Officer or other qualified staff.

Record keeping and information sharing

  • Material relating to the disclosure will be stored securely;
  • Access rights to the information disclosed will be limited to those involved in the investigation of the disclosure;
  • Even where you have provided consent, your identity or information that would reveal your identity will only be revealed on a need to know basis (for example to those directly involved in handling and investigating the disclosure)
  • Each person involved in handling and investigating the disclosure will be reminded of the confidentiality requirements.

Consideration should be given to the fact that while every effort will be made to protect your confidentiality, in practice, there will be times where your identity may be obvious if for example:

  • you have previously told people about your intention to make a disclosure,
  • you are one of a small number of people with access to the information you are disclosing, or
  • the information being disclosed is information that you have been told in confidence.

If you feel your confidentiality has been breached you may contact the Whistleblower Protection Officer, seek independent legal advice or contact ASIC, APRA or the ATO.


Protection from detriment or retaliation


We have a zero tolerance for acts of retaliation. It is illegal for someone to threaten or cause detriment to you because they believe you have made or will make a disclosure. All reasonable steps will be taken to protect you from detriment and disciplinary action will be taken against any employee who engages in retaliation or detrimental acts or omissions against you.


All managers will be trained on their responsibilities regarding confidentiality and prevention of detrimental conduct, through face to face training and periodic communications.


We are committed to making sure that Eligible Whistleblowers are treated fairly and do not suffer detriment for making a disclosure under this Standard.


We may take the following measures to ensure that if you have made a protected disclosure you are protected from detriment:


(a)  put in place processes for assessing risks of detriment against you and other persons, which will commence as soon as possible after receiving a disclosure;

(b)  provide you with support services including counselling or other professional services;

(c) develop strategies to help you minimise and manage stress, time or performance impacts, or other challenges resulting from the disclosure or investigation;

(d) allow you to perform duties to another location;

(e) reassign or relocate you to another role at the same or substantially the same level;

(f) make modifications to your workplace or way you perform your duties;

(g) develop processes for ensuring that management are aware of their responsibilities to maintain the confidentiality of disclosure, address the risks of isolation or harassment, manage conflicts, and ensure fairness when managing the performance of, or taking other management action relating to you.


If you feel you have suffered detriment or retaliation as a result of your disclosure you may contact the Whistleblower Protection Officer, seek independent legal advice or contact ASIC, APRA or the ATO.


Additional support


Current employees and their family members have access to the Employee Assistance Programme (“EAP”) which provides confidential counselling services. Additionally, all current and former employees may request additional information and support from the Whistleblower Protection Officer if required.


If you are not an employee of BNY Mellon or its affiliated entities, we will endeavor to support you but will be unable to provide the same practical support provided to employees.


3.1.6. Handling and Investigating a Disclosure


All concerns reported via the Ethics Office are taken seriously and will be investigated in accordance with Ethics Office procedures. Reports can be made anonymously, and you will be offered options to help preserve your anonymity and means by which to follow up on your report.


All other disclosures will be referred to a Whistleblower Protection Officer and follow the procedure outlined below. In the absence of consent, Eligible Recipients should take care to ensure that the identity of the discloser or any information that carries the risk of identifying the discloser is not revealed.


We acknowledge that there may be limitations on the investigation process, for example in circumstances where we are unable to contact you or where the disclosure has been made anonymously. If you make an anonymous disclosure we will, where possible, offer you the opportunity to provide limited consent (e.g. consent to allow your identity to be revealed to a limited number of people to allow for a proper investigation).


Assessment and investigation of the disclosure


The Whistleblower Protection Officer will assess disclosures and determine whether they fall within the scope of this Standard. If you have provided your identity and/or contact details, we will aim to contact you within 3 business days to acknowledge receipt of the disclosure and advise you on next steps.


Investigations will be conducted in an objective, fair and timely manner while preserving the confidentiality of the investigation. Investigations will be conducted independently of you, any individual subject to the disclosure and any department or business unit involved. The timeframe of investigations and the frequency of updates may vary depending on the nature of the disclosure.


The Whistleblower Protection Officer will oversee the investigation and will:

  • conduct a preliminary review of the disclosure and determine if a formal in-depth investigation is required;
  • assess any potential risk of detriment to you;
  • ensure the investigation is conducted in a timely, fair and objective manner;
  •  determine the person’s within or outside the organization that should lead the investigation;
  • aim to provide regular updates on the progress of the investigation (if possible to contact you);
  • where possible, notify the persons against whom an allegation has been made and allow them opportunity to respond to the allegation;
  • ensure appropriate and proportionate action is taken to resolve issues identified;
  • brief all people involved in the investigation of the confidentiality requirements.

The Whistleblower Protection Officer or those involved in the investigation process may need to contact you for further information to assist with the investigation. If you have not provided your consent to be contacted or you have made an anonymous disclosure this may affect our ability to investigate the disclosure




The method of documenting and reporting the findings of any investigation will depend on the nature of the disclosure.


Where possible and to the extent permitted under applicable laws, the Whistleblower Protection Officer will notify you and the person(s) against whom allegations have been made of the outcome of the investigation. It should be noted that for confidentiality reasons and to protect the interest of all parties, there may be circumstances where it is not appropriate to reveal details of the outcome to you or where details of the outcome are limited.


3.1.7. Fair Treatment of Individuals Mentioned in a Disclosure


We are committed to ensuring the fair treatment of any individuals mentioned in a protected disclosure. The Whistleblower Protection Officer will advise any employee who is the subject of a disclosure report about the disclosure if and when required to ensure procedural fairness and prior to any actions being taken or adverse findings being made.


3.1.8. Eligible Recipients – Obligations


All recipients of a disclosure must treat it seriously and in confidence. It is critical that Eligible Recipients understand and observe the obligations regarding the confidentiality of the individual making the disclosure. If you receive a disclosure, you must not reveal the identity or information that may reveal the identity of the person making the disclosure without their consent. Where possible, an Eligible Recipient should request limited consent to reveal the identity of the discloser to the Whistleblower Protection Officer. If there is uncertainty, contact a Whistleblower Protection Officer for further advice and guidance. 

4. Adherence and Control


Governance and oversight of the effectiveness of the Standard will be undertaken where relevant by the respective oversight committees of the legal entities noted in Section 2.


The Whistleblower Protection Officer will provide the respective Committees with broader trends, themes and/or emerging risks highlighted by disclosures made and how issues are being addressed or mitigated.


All confidentiality and anonymity requirements will be adhered to during the reporting process.


You should immediately inform a Whistleblower Protection Officer if you have concerns that:

  • You have been or may be subject to detrimental or retaliatory conduct; or
  • Your disclosure has not been handled in accordance with this Standard.

The Whistleblower Protection Officer will endeavor to address all concerns you have raised and take any action they consider appropriate. 

4.1. Definitions


Public interest disclosure

Disclosure of information to a journalist or parliamentarian, where:
a) At least 90 days have passed since the discloser made the disclosure to ASIC, APRA or another Commonwealth body prescribed by regulation;
b) The discloser does not have reasonable grounds to believe that action is being, or has been taking in relation to their disclosure;
c) The discloser has reason to believe that making a further disclosure of the information is in the public interest; and
d) Before making the public interest disclosure, the discloser has given written notice to the body to which the previous disclosure was made that (i) includes sufficient information to identify the previous disclosure and (ii) states that the discloser intends to make a public interest disclosure


Emergency disclosure

Disclosure of information to a journalist or parliamentarian where:
a) The discloser has previously made a disclosure to ASIC, APRA, or another Commonwealth body prescribed by regulation;
b) The discloser has reasonable grounds to believe that the information concerns a substantial and imminent danger to the health or safety of one or more persons or to the natural environment;
c) Before making the emergency disclosure, the discloser has given written notice to the body to which the previous disclosure was made that (i) includes sufficient information to identify the previous disclosure and (ii) states that the discloser intends to make an emergency disclosure; and
d) The extent of the information disclosed in the emergency disclosure is no greater than is necessary to inform the journalist or
parliamentarian of the substantial imminent danger.


Disclosable matters

This may include the following conduct:

  • fraud, negligence, default, breach of trust and breach of duties under the Corporations Act 2001 (Cth) (Corporations Act);
  •  conduct which constitutes an offence against, or a contravention of:
    • the Corporations Act or an instrument made under it, or other financial sector laws enforced by the Australian Securities Investments Commission (ASIC) or the Australian Prudential Regulation Authority (APRA);
    • any other law of the Commonwealth that is punishable by imprisonment for a period of 12 months or more; or
    • conduct which represents a danger to the public or the financial system (even if the conduct does not involve a breach of a particular law).


Personal workplace grievances

Personal work-related grievances are those that relate to your current or former employment and have personal implications for you personally, but do not (i) have any other significant implications for BNY Mellon or another entity, or (ii) relate to any actual or alleged conduct about a Disclosable Matter. Examples include:

  • An interpersonal conflict between you and another employee
  • A decision that does not involve a breach of workplace laws
  • A decision about a transfer or promotion
  • A decision about the terms and conditions of your engagement
  • A decision to suspend or terminate your employment or other disciplinary action

1Eligible Recipients include (i) an officer or senior manager, (ii) the internal or external auditor or actuary, (iii) a person authorised by BNY Mellon to receive disclosures that may qualify for protection. 


2Including (i) that a disclosure must first have been made to ASIC, APRA, or another prescribed body, (ii) that written notice is provided to the body to which the initial disclosure was made and (iii) in the case of a public interest disclosure, at least 90 days has passed since the original disclosure.