The Federal Court’s decision in Australian Securities and Investments Commission v TerraCom Ltd (No 3) [2025] FCA 1017, handed down on 26 August, is the first civil penalty imposed for whistleblower victimisation in Australia. The Court ordered TerraCom to pay $7.5 million imposed for the single admitted contravention, reflecting seriousness, deterrence, and all facts and circumstances.
The message is clear: whistleblower protections are not symbolic. They will be enforced. And how an organisation responds when someone speaks up will now be judged not only in the courts of law, but also in the court of public opinion.
TerraCom Whistleblower Case Context
A short tenure, a serious allegation
Justin Williams joined TerraCom in July 2019 as General Manager, Commercial. Barely a month later, his employment was terminated. On that same day, Williams raised allegations with the CEO and CFO that coal quality certificates were being manipulated. He alleged that ALS, TerraCom’s independent laboratory, was amending results without justification to produce more favourable certificates used for billing customers.
Escalation and PwC’s involvement
Williams repeated his concerns to a board adviser the next day and handed over supporting documents. TerraCom’s lawyers engaged PwC to investigate. By December 2019, PwC had delivered its report: it identified inconsistencies in coal quality reporting but could not explain them. Critically, the report did not dismiss Williams’ allegations as unfounded.
Parallel legal action and disclosure to ASIC
In December 2019, Williams commenced proceedings under the Fair Work Act. By February 2020, he disclosed the same allegations to ASIC, triggering formal whistleblower protections under the Corporations Act.
The media spotlight and TerraCom’s response
On 24 February 2020, ALS issued a statement to the ASX and the Australian Financial Review reported on the allegations. TerraCom responded forcefully, issuing three announcements:
- An ASX release (24 February) describing Williams’ allegations as false and “totally unfounded”;
- An “Open Letter to Shareholders” (12 March) suggesting Williams was motivated by financial gain, including an alleged $5 million demand during mediation;
- A further ASX release (3 April) asserting that Williams was dismissed as part of a redundancy program rather than for whistleblowing.
These statements were not neutral. They painted Williams as opportunistic and unreliable, misrepresented his termination, and disclosed details from a confidential mediation.
ASIC steps in
On 28 February 2023, ASIC commenced proceedings against TerraCom and certain executives*. TerraCom initially declared it would vigorously defend the case. But by May 2025, TerraCom admitted contraventions of s1317AC(1) of the Corporations Act, acknowledging that the announcements had caused Williams detriment in the form of hurt, humiliation, distress, embarrassment, and reputational damage.
Justice Jackman agreed: the whistleblower protection provisions are designed to prevent exactly this kind of harm.
*It is worth noting that ASIC also commenced proceedings against TerraCom’s CEO and CFO personally. While those actions were ultimately dismissed, the attempt itself is telling. ASIC has shown it is prepared to test executive accountability under whistleblower laws, and the Court treated senior management involvement as an aggravating factor in the company’s $7.5 million penalty.
Breakdown of the Penalty
The Court imposed:
- $7.5 million – for a contravention of the victimisation provisions, covering three announcements. The Court set the penalty at a high level to reflect deterrence, the seriousness of the conduct, and the involvement of senior executives.
- ~$1 million– ASIC’s legal costs.
This outcome cements a critical precedent: emotional and reputational harm is legally actionable detriment under the Corporations Act. Retaliation is not limited to financial loss or career impact.
But that’s only the starting figure as it doesn’t include:
- Reputational damage from being the first company publicly penalised for whistleblower victimisation;
- Management time spent dealing with culture fall-out, litigation, media, and regulatory oversight;
- Ongoing compliance monitoring and the cost of rebuilding trust with stakeholders.
The real price of getting whistleblower response wrong goes far beyond the court imposed penalty.
Case learnings
- Protection begins at suspicion.
Liability attaches when an organisationbelieves or suspects someone may have made a protected disclosure. Waiting for confirmation is no shield. - Defensiveness is dangerous.
TerraCom’s instinct to “set the record straight” in the media only multiplied its exposure. Public denials and personal attacks can themselves constitute unlawful victimisation. - Law recognises emotional harm
The Court expressly recognised humiliation, distress, and embarrassment as detriment. That acknowledgment brings the law into alignment with the lived reality of whistleblowers. - Executives set the tone – and share the risk.
CEO and CFO involvement aggravated the penalty. Leadership behaviour is now a legal risk vector, not just a cultural issue. - Post-incident compliance is not enough.
TerraCom strengthened its whistleblower policies and implemented training after the incident and the Court treated these reforms as relevant mitigating factors – consistent with sentencing principles. However, the penalty ultimately reflected the seriousness and context of the original contravention, not just post-incident improvements.
The case is a reminder that whistleblowing is fundamentally about people. Speaking up takes courage. When organisations respond with hostility, harm is amplified – not only for the individual, but for culture, trust, and reputation.
Practical insights for Companies
- Design for prevention and readiness.
Policies on their own don’t protect anyone. Effective programs embed prevention and a constant state of readiness: multiple safe reporting channels, enforceable confidentiality safeguards, real protections against detriment with practical procedures behind them, and case-handling processes stress-tested to work under pressure, not just in theory.
- Guarantee independence in investigations.
Allegations must be investigated without fear or favour. That requires role segregation and clear governance. Where impartiality cannot be guaranteed internally, boards must engage independent counsel or specialist investigators. Anything less compromises both fairness and protection.
- Make training role-specific and relentless.
Generic training fails. Employees must know how to report safely. Senior managers must know how to respond under Eligible Recipient obligations without causing detriment. Boards must understand oversight duties and personal liability. Training must be tailored, practical, scenario-based, and ongoing.
- Stress-test and evolve.
Whistleblower frameworks can’t sit idle. They must be reviewed and tested regularly, not only after incidents, and updated to reflect legal developments, cultural shifts, and case learnings. Static programs breed risk; living programs build trust.
The Your Call Difference: Human Centred by Design
Over two decades of experience have shown us that effective whistleblower programs are never just about policies. They demand a fundamentally different design, one that embeds prevention, protection, and trust at every step, underpinned by human-centred principles.
Your Call ensures psychological safety from first contact
- Disclosures handled by trauma-informed professionals who respect the courage it takes to speak up and follow curated handling process.
- Structured conversations that surface the facts while protecting dignity and ensuring accessibility.
- Transparent processes that show whistleblowers their concerns are being taken seriously.
- Agency around reporting process, pathways and recipients.
Building Culture, Not Just Compliance
- Board-level & Senior Manager training that emphasises prevention over reaction and makes liability real.
- Technology designed with best practice principles built in.
- Ongoing support that treats whistleblowers not as risks to manage but as partners in organisational integrity.
The TerraCom case proves the cost of failure: millions in penalties, reputational damage, management distraction, and ongoing regulatory oversight. At Your Call, we specialise in building whistleblower frameworks that don’t just tick boxes but protect people and by doing so, protect organisations.
Download our Case Summary and Baseline Self-Assessment Toolkit.