Building Trust Before Crisis Strikes: Lessons from Rio Tinto's myVoice Framework

Most whistleblowing policies sit in the back of employee handbooks, quietly gathering dust until something goes badly wrong. But even the most robust frameworks aren’t designed for damage control - they’re built to create trust long before issues ever surface.

Rio Tinto’s confidential whistleblower program ‘myVoice’ is a good example of how an organisation can turn a compliance obligation into a cultural asset. By combining visible leadership, trauma-informed practice and robust reporting channels, the British Australian mining company doesn’t just manage disclosures - it reinforces integrity across the business every day.

What Makes myVoice Different?

Unlike many whistleblowing channels that only cover current employees, myVoice is purposefully broad. Open to current and former staff, contractors, suppliers and even community members with concerns about the company, its accessibility sends a clear message straight away: if you see something, you can say something - safely.

Concerns can span almost anything that threatens Rio Tinto’s standards or social licence to operate - from  safety violations and human rights breaches to environmental or financial misconduct, fraud, bribery or broader business integrity concerns.

Reports can be made through:

• A dedicated hotline website
• A phone hotline
• Line managers or HR (who then pass them to myVoice)

Once received, every disclosure goes straight to Rio Tinto’s independent Business Conduct Office, which guarantees confidentiality and impartial handling.

While Rio Tinto has operations across the globe, in Australia, the framework also aligns with the Corporations Act 2001 and Taxation Administration Act 1953, That means whistleblowers are safeguarded even for anonymous disclosures - or for concerns which are later proved to be unfounded (provided they were raised in good faith).

This combination of legal backing, impartial oversight and visible leadership support underpins trust - especially important when people are making disclosures that can feel daunting or traumatic.

Why Accessibility Builds Trust

The real strength of myVoice isn’t the technology - it’s the cultural signals it sends. Accessible whistleblowing systems like this build trust through five key mechanisms:

1. Signalling Openness and Accountability
   A visible, easy-to-use system shows that leadership isn’t afraid of scrutiny. It tells employees, partners and regulators: ‘We’re prepared to hear uncomfortable truths.’
2. Reducing Fear of Retaliation
   The primary reason people remain silent is fear - of career damage, isolation or legal consequences. Anonymous reporting options, clear legal protections and respectful handling directly address this.
3. Normalising Speaking Up
   When the framework is embedded into onboarding, training and day-to-day comms, speaking up becomes normalised. Employees see others use it without repercussions and gradually trust that transparency is expected, not punished.
4. Enabling Early Intervention
   Trusted systems encourage early reporting of minor breaches, patterns of behaviour or other early warning signs. This means organisations can act, potentially avoiding legal, financial or reputational damage.
5. Enhancing External Reputation
   Investors, regulators, suppliers and community partners increasingly judge trustworthiness by the credibility of whistleblowing systems. A robust framework signals self-policing and ethical maturity, boosting reputation and stakeholder confidence.

Scaling Lessons for Smaller Organisations

Of course, not every business has Rio Tinto’s ‘bells and whistles’ - dedicated offices, global hotlines and in-house investigators. Many smaller organisations rely on generic HR templates or tick-box policies. Sadly, these rarely build the kind of trust that makes people feel safe enough to use them.

A more effective approach is what we call a balanced reporting framework, with the aim of creating three complementary pathways:

• Internal channels: ideal for straightforward concerns, these are clearly signposted and genuinely trusted pathways through HR, line management or senior leaders.
• Independent options: crucial when internal reporting feels risky or compromised, these include encrypted reporting tools, outsourced providers or third-party hotlines for people who need anonymity.
• External escalation: designed for more serious legal violations or for when internal processes fail, this route provides clarity on when and how issues should go to regulators, law enforcement or industry bodies.

What each business will need depends on scale. A 25-person startup won’t have the same requirements as a 1000-strong organisation, but once owners can’t personally see every corner of the business, structured channels become essential.

Many SMEs partner with Employee Assistance Program (EAP) providers, use encrypted SME-friendly platforms, or work through industry associations offering shared reporting infrastructure.

The goal shouldn’t be to replicate Rio Tinto’s system in miniature, rather to make sure the core trust-building ingredients are in place, proportionate to the business size. 

Beyond Compliance: The Strategic Advantage

Too many organisations only build frameworks after a scandal breaks, when trust has already been eroded. By contrast, those that invest early gain a sustainable competitive advantage:

• Employees trust them enough to raise issues before they erupt.
• Suppliers and partners see them as reliable collaborators.
• Communities are more likely to grant them social licence to operate.
• Investors and regulators view them as ethically mature.

That’s why treating whistleblowing as part of your cultural infrastructure - not just a compliance tick-box exercise – is so important.

Making It Operational

The most sophisticated framework won’t work if it lives in a drawer. Rio Tinto’s myVoice is effective because it is operationalised:

• Leadership actively promotes and supports it.
• Training and communication embed it into everyday culture.
• Outcomes are visible, so people see disclosures handled fairly.
• The system is trauma-informed and human-centred. Designed with respect for the psychological impact disclosures can have on whistleblowers, it offers early interventions and reintegration support as well as clear pathways for resolution.
• Support isn’t just legal but also cultural, physical and psychosocial - helping people feel safe through the whole process. Rio Tinto’s Business Conduct Office (or ‘Discrete Unit’) coordinates a team of partners who focus on five key areas: cultural safety, physical safety, psychosocial support, regular wellbeing check-ins and explicit victimisation risk assessments. This ensures disclosures aren’t simply received – they are actively safeguarded from every angle.

Success is measured differently too. Counting the number of reports tells you very little. Far more meaningful are awareness levels, survey results on trust, early-resolution rates and confidence among stakeholders.

No matter the size of the organisation, when it comes to whistleblowers, the aim is the same: to provide accessible, credible channels backed by visible leadership and genuine support. Because when speaking up is safe and normalised, problems are addressed early, trust deepens and resilience becomes embedded in the culture. Rio Tinto’s myVoice shows what this looks like in practice - proof that the best time to build trust is before crisis strikes.

‍