Should a  Mauritian FSC-regulated firm set up an internal whistleblowing system?

Introduction to Whistleblowing for Mauritian FSC-Regulated Firms

Whistleblowing systems allow employees, clients, suppliers, or other stakeholders to report suspected wrongdoing, such as breaches of laws, unethical practices, or actions harmful to the public or clients, safely and confidentially.

In Mauritius, there are two drivers to have systems and controls

1. 45A of the Financial Services Act 2007.
2. The Financial Crimes Commission (FCC) issued the Guidelines on Legal Persons on 14 July 2025, pursuant to section 52(2) of the Financial Crimes Commission Act 2023 (FCCA). The whistleblowing requirement falls under Principle 3: Implementation of Control Measures, subsection (b) Reporting channel.

These matters are discussed below

45A of the Financial Services Act 2007.

• For firms regulated by the Financial Services Commission (FSC) in Mauritius, establishing an internal whistleblowing system is a regulatory requirement under section 45A of the Financial Services Act 2007.

• https://www.fscmauritius.org/media/182830/faqs.pdf
• This section provides legal protections for good-faith disclosures and penalises retaliation, aiming to foster transparency and early detection of risks.

FCC Whistleblowing / Reporting Channel Requirement Guidance for Legal Persons in Mauritius (Financial Crimes Commission Guidelines on Legal Persons, 14 July 2025)

• The Financial Crimes Commission (FCC) issued the Guidelines on Legal Persons on 14 July 2025, pursuant to section 52(2) of the Financial Crimes Commission Act 2023 (FCCA).
• These guidelines apply to all legal persons (any entity, including private companies, regardless of size or industry) in Mauritius not just FSC licensees.
• They outline adequate procedures to prevent offences under Part III of the FCCA (e.g., corruption, money laundering, fraud, financing of drug dealing).
• Failure to have such procedures in place can result in corporate liability and fines of up to MUR 20 million. A defence is available if adequate procedures are proven (section 53 FCCA).
• The whistleblowing requirement falls under Principle 3: Implementation of Control Measures, subsection (b) Reporting channel.
• It is distinct from section 45A of the Financial Services Act (which applies only to FSC licensees and requires reporting suspicions to the FSC).
• Key Requirements for the Reporting Channel: A legal person should:
• Establish an accessible and confidential trusted reporting channel (whistleblowing channel), which may be used anonymously, for internal and external parties to raise concerns regarding real or suspected incidents or inadequacies of adequate procedures;
• Encourage persons to report, in good faith, any suspected, attempted or actual Part III FCCA offence directly to the FCC;
• Establish a secure information management system to ensure the confidentiality of the whistleblower’s identity and the reported information; and
• Prohibit retaliation against those making reports in good faith.
• Implementation Notes
• The channel must be trusted, accessible, and support anonymous reporting where appropriate.
• It forms part of broader proportionate controls under Principle 3 (e.g., due diligence on personnel/business partners, transaction monitoring, beneficial ownership transparency).
• Policies must be documented, communicated to personnel (and publicly where appropriate), and reinforced through training (Principle 5: Training and Communication).
• Entities should maintain records, regularly monitor and review the channel's effectiveness (Principle 4), and ensure protection for good-faith whistleblowers while promoting direct reporting to the FCC for suspected offences.
• This requirement is risk-based and proportionate tailor the channel to your entity's size, nature, and risk profile. Document your implementation to support the adequate-procedures defence, if needed. For tailored advice, consult legal/compliance professionals.

 Key Differences from FSA Section 45A

• FSA s45A   
• Sector-specific (FSC licensees only); focuses on mandatory reporting of suspicions to the FSC.
• FCC Guidelines (2025)   
• Apply to every legal person in Mauritius; focus on internal prevention systems (including an internal/external whistleblowing channel) as a defence against corporate liability for Part III offences.
• Reporting to the FCC is encouraged, but it forms part of broader preventive controls.

FSC GUIDANCE

• The FSC's DRAFT Guidance Notes on Whistleblowing outline the minimum standards, emphasising that the system should be proportionate to the firm's size and nature particularly important for small firms to avoid overly complex setups.
• The Guidance Notes on Whistleblowing, issued under section 7(1)(a) of the Financial Services Act by the Mauritius Financial Services Commission (FSC), remain in draft form.
• They were released for public consultation on March 19, 2024, with comments due by April 30, 2024.
• As of March 16, 2026, no final version has been issued, and the available document explicitly retains its draft status with no updates or effective date indicated.

STEPS TO SET UP AN INTERNAL WHISTLEBLOWING SYSTEM

For a small firm, keep the setup simple, cost-effective, and integrated into existing processes. Here's a step-by-step guide based on FSC guidelines:

1. Develop a Written Whistleblowing Policy
• Outline the purpose: Encourage reporting of concerns without fear.
• Define reportable issues: E.g., legal breaches, financial misconduct, or harm to stakeholders.
• Include mandatory elements:
• Confidentiality and Anonymity: Allow anonymous reports and commit to protecting the whistleblower's identity unless they consent otherwise.
• Protections Against Retaliation: Explicitly state that victimisation (e.g., harassment, demotion, or threats) is prohibited and will be investigated, with disciplinary action for offenders.
• Reporting Channels: Provide accessible options like a dedicated email, hotline, or a designated "whistleblower champion" (e.g., a senior manager or external advisor for independence in small teams).
• For small firms: A basic policy document (e.g., 2-3 pages) suffices; no need for expensive software use email or a simple form.
2. Appoint a Whistleblower Champion or Responsible Person
• Designate an independent individual (e.g., a board member or external consultant) with authority to handle reports, access resources, and ensure investigations.
• In small firms: This could be part-time or shared with compliance duties to minimise costs, but ensure independence (e.g., not the person implicated in reports).
3. Establish Procedures for Handling Reports
• Intake: Ensure channels are reliable and promoted (e.g., via staff handbook, website, or emails to stakeholders).
• Investigation: Conduct timely, impartial reviews. Document steps and outcomes.
• Feedback: Provide updates to the whistleblower where possible, without breaching confidentiality.
• Escalation: If internal handling is inadequate (e.g., due to senior involvement or urgency), allow or direct reports to the FSC's Whistleblowing Desk (email: whistleblowing@fscmauritius.org or in-person).
4. Promote and Train on the System
• Circulate the policy to all employees and make it accessible (e.g., on an intranet or shared drive).
• Communicate to external stakeholders via website or contracts.
• Conduct basic training: Annual sessions or memos explaining how to report, protections, and the process.
• For small firms: Integrate into onboarding or team meetings no need for formal programs; focus on building an "open-door" culture.
5. Maintain Records and Monitor
• Keep a confidential log of all reports, including details, investigations, and outcomes.
• Review the system periodically (e.g., annually) for effectiveness.
• Report any serious issues to the FSC if required.

Protections for Whistleblowers Under the law:

• Good-faith reports to the FSC are immune from civil or criminal liability.
• Identity disclosure requires consent, except for FSC functions.
• Retaliation is an offence, punishable by up to 50,000 MUR fine and/or 1 year imprisonment.
• False or malicious reports are also penalised similarly.

Considerations for Small Firms

• The FSC emphasises proportionality: Tailor the system to your scale, avoid overkill like dedicated hotlines if a secure email works. Focus on core protections and accessibility. If resources are limited, consider outsourcing report handling to a third-party provider.
• This ensures compliance without straining operations, while promoting trust and risk mitigation.
• Consult legal or compliance experts for customisation and review the full FSC Guidance Notes and FAQs for templates or examples.

Sources  

ACRION

1. https://www.linkedin.com/posts/acrioncompliance-ltd_acrionltd-whistleblowing-corporategovernance-activity-7439266344505745408-y14j?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAA_6EIB0wPAWyjQcuq_XiD3asUV8xpMeZ0
1. Acrion is a compliance and risk management advisory firm dedicated to helping businesses navigate today’s complex regulatory landscape with confidence.
2. Website WWW.acrioncompliance.com   Phone (+230) 490 4220

FCC sources

1. Full Guidelines: Financial Crimes Commission, "Guidelines on Legal Persons" (issued 14 July 2025)
1. Direct PDF: https://fcc.mu/wp-content/uploads/2025/07/Guidelines-on-Legal-Persons-Final.pdf
2. FCC webpage: https://fcc.mu/guidelines-on-legal-persons-issued-by-the-fcc
3. Alternative hosting: https://gra.govmu.org/gra/wp-content/uploads/2025/07/Guidelines-on-Legal-Persons.pdf
2. Financial Crimes Commission official website: https://fcc.mu/
3. Financial Crimes Commission Act 2023 (as amended): Available via the FCC website or the Mauritius government portals.

OTHER SOURCES

1. Guidance Notes on Whistleblowing (Issued under section 7(1)(a) of the Financial Services Act) - FSC Mauritius URL: https://www.fscmauritius.org/media/170511/guidance-notes-whistleblowing.pdf
2. Financial Services Act 2007 (consolidated version as at 28 Aug 2019) - FSC Mauritius URL: https://www.fscmauritius.org/media/1013/financial-services-act-2007-28-aug-2019-cc.pdf
3. Frequently Asked Questions Whistleblowing - FSC Mauritius URL: https://www.fscmauritius.org/media/182830/faqs.pdf
4. Whistleblowing section - FSC Mauritius official website URL: https://www.fscmauritius.org/ (Whistleblowing page and related links)
5. Draft Guidance Notes on Whistleblowing communiqué and related announcements - FSC Mauritius URL: https://www.fscmauritius.org/media/170513/communiqu%C3%A9.pdf (and related pages)
6. The Financial Services Act 2007 (alternative consolidated PDF) URL: https://fcc.mu/wp-content/uploads/2024/06/THE-FINANCIAL-SERVICES-ACT-2007.pdf
7. Mauritius Draft Guidance Notes on Whistleblowing - Comsure Group summary URL: https://www.comsuregroup.com/news/mauritius-draft-guidance-notes-on-whistleblowing
8. COMMUNIQUÉ: FSC issues draft Guidance Notes on Whistleblowing for public consultation, published March 19, 2024 – announces the draft for consultation (comments due April 30, 2024). URL: https://www.fscmauritius.org/media/170513/communiqu%C3%A9.pdf
9. Financial Services Act 2007 (consolidated version, including section 45A on Whistleblowing) The primary law requiring whistleblowing protections and policies. URL: https://www.fscmauritius.org/media/1013/financial-services-act-2007-28-aug-2019-cc.pdf (Alternative consolidated version: https://fcc.mu/wp-content/uploads/2024/06/THE-FINANCIAL-SERVICES-ACT-2007.pdf)
10. Whistleblowing section / FAQs on FSC Mauritius website General page with information on reporting, protections, and FAQs. URL: https://www.fscmauritius.org/en/enforcement/whistleblowing/faqs
11. Comsure Group summary: Mauritius Draft Guidance Notes on Whistleblowing External summary of the draft consultation (dated April 2024). URL: https://www.comsuregroup.com/news/mauritius-draft-guidance-notes-on-whistleblowing
12. MITCO summary: FSC issues draft Guidance Notes on Whistleblowing for public consultation. Industry summary of the March 2024 draft release. URL: https://mitcoworld.com/fsc-issues-draft-guidance-notes-on-whistleblowing-for-public-consultation
13. PPLAAF (Platform to Protect Whistleblowers in Africa) – Republic of Mauritius page References the FSC Guidance Notes (still linking to the 2024 draft PDF as of 2026). URL: https://www.pplaaf.org/legislationpays/republic-of-mauritius.html