# US whistleblower program builder
> Source: https://legalcode.md/skills/legalcode-us-whistleblower-program-builder | [HTML version](https://legalcode.md/skills/legalcode-us-whistleblower-program-builder)

Builds US federal whistleblower reporting and investigation programs covering SOX Section 806 employee protections (18 U.S.C. § 1514A; 29 C.F.R. Part 1980)…

Builds US federal whistleblower reporting and investigation programs covering SOX Section 806 employee protections (18 U.S.C. § 1514A; 29 C.F.R. Part 1980), SOX Section 301 audit committee complaint procedures (15 U.S.C. § 78j-1(m)(4)), Dodd-Frank Section 922 SEC Whistleblower Program (15 U.S.C. § 78u-6; Rules 21F-1 through 21F-17), CFTC Whistleblower Program (7 U.S.C. § 26), OSHA's 25+ whistleblower protection statutes, False Claims Act qui tam (31 U.S.C. § 3730), Anti-Money Laundering Act of 2020 FinCEN whistleblower (31 U.S.C. § 5323), and IRS whistleblower awards (26 U.S.C. § 7623). Covers hotline and intake channel architecture, Rule 21F-17 anti-impediment employment agreement audit, anti-retaliation controls and burden-of-proof analysis (SOX contributing-factor standard; Dodd-Frank heightened standard; Digital Realty Trust v. Somers, 583 U.S. 149 (2018)), Upjohn warning protocols, investigation privilege structure, litigation hold triggers, audit committee reporting lines under NYSE Rule 303A.07 and Nasdaq Rule 5605(c)(3), SEC Rule 10D-1 clawback integration, DOJ ECCP September 2024 adequacy criteria, documentation discipline, SEC examination readiness, and remediation workflows. Use when building a new US whistleblower program from scratch, auditing an existing program for SOX/Dodd-Frank/OSHA compliance gaps, reviewing employment and separation agreements for Rule 21F-17 prohibited provisions, preparing a board or audit committee whistleblower governance assessment, evaluating SEC Whistleblower Office award eligibility, responding to OSHA Whistleblower Protection Program investigations, or integrating whistleblower obligations into a post-acquisition compliance remediation. Jurisdiction: United States federal law.

This skill designs, audits, and optimizes whistleblower programs for organizations subject to US federal whistleblower statutes. It covers the full program lifecycle — from channel architecture through intake triage, investigation structuring, anti-retaliation controls, regulatory deadline management, and board governance — with depth on the SEC and DOJ compliance standards that determine enforcement exposure. **Covers:** - Multi-statute regulatory mapping: SOX §806/§301, Dodd-Frank §922, CFTC §748, OSHA (25+ statutes), False Claims Act, AML Act of 2020, IRS §7623 - SEC Whistleblower Office award eligibility analysis (Rule 21F-4 through 21F-16) - Rule 21F-17 anti-impediment employment agreement audit with specific prohibited clauses - Anti-retaliation framework: SOX contributing-factor standard; Dodd-Frank heightened standard; *Digital Realty Trust v. Somers* (2018) external-report requirement - SOX Section 301 audit committee governance (NYSE Rule 303A.07; Nasdaq Rule 5605(c)(3)) - Upjohn warning script and investigation privilege election framework - Litigation hold trigger analysis for whistleblower complaints - DOJ ECCP (September 2024) adequacy criteria for whistleblower channels - SEC Rule 10D-1 clawback policy integration - SEC examination readiness: documentation standards, access controls, metrics - Program domain assessment: COMPLIANT / PARTIAL / NON-COMPLIANT classification - Glass Box audit trail for regulatory examination and board reporting **Does not:** - Design programs for EU Directive ...

## Jurisdictions

United States — Federal



---
*Legalcode -- legalcode.md*