Policy · Reporting, protection and retaliation

Whistleblowing and Retaliation

Approved for publication by Kanwar Partap Singh Gill, MD on . Lifecycle state: CURRENT. Written from primary statutory and regulatory text and the controlling authority cited throughout.

Two California statutes protect a physician who says something is wrong, and they are close to mirror images. Health and Safety Code section 1278.5 covers medical staff members who are not employees, and gives them a weak evidentiary device. Labor Code section 1102.5 covers employees only, and gives them the strongest burden framework in California employment law. Which one you are in is usually decided by a contract you signed years earlier.

Why there are two statutes

The reason California ended up with parallel protections is structural rather than accidental. A large share of the physicians best placed to observe an unsafe condition in a hospital are not employed by it. They hold privileges granted by a medical staff, admit and treat under those privileges, and are paid by a group or by themselves. An ordinary employment-retaliation statute does not reach them, because the injury — loss or restriction of privileges — is not an employment action and the actor is not their employer.

Health and Safety Code section 1278.5 exists to close that gap in the facility setting. Labor Code section 1102.5 is the general employment statute, and it is far stronger where it applies. The practical consequence is that two physicians raising the same concern about the same ward on the same day can be in materially different legal positions.

Labor Code section 1102.5, subdivision by subdivision

The section is short and each subdivision does distinct work.

(a) The anti-gag provision. An employer, or any person acting on behalf of the employer, shall not make, adopt, or enforce any rule, regulation, or policy preventing an employee from disclosing information to a government or law enforcement agency, to a person with authority over the employee, or to another employee who has authority to investigate, discover, or correct the violation or noncompliance, or from providing information to, or testifying before, any public body conducting an investigation, hearing, or inquiry — if the employee has reasonable cause to believe the information discloses a violation of state or federal statute, or a violation of or noncompliance with a local, state, or federal rule or regulation, regardless of whether disclosing the information is part of the employee’s job duties.

This limb is about documents rather than conduct. A confidentiality clause, a media policy, or a communications protocol that on its face prevents protected disclosure is within subdivision (a) whether or not anyone has yet been punished under it.

(b) The core retaliation prohibition. The same protected disclosures, with an important addition: an employer shall not retaliate against an employee for disclosing information or because the employer believes that the employee disclosed or may disclose information. Anticipatory retaliation is covered. An employee who has not yet reported anything, but whom the employer believes is about to, is protected.

(c) Refusal to participate. An employer shall not retaliate against an employee for refusing to participate in an activity that would result in a violation of state or federal statute, or a violation of or noncompliance with a local, state, or federal rule or regulation. No disclosure to anyone is required. The protected act is the refusal itself.

(d) Former employment. Protection extends to the exercise of rights under (a), (b) or (c) in any former employment — so a new employer may not retaliate for what an employee did at the last one.

(e) Government employees. A report made by an employee of a government agency to their employer is a disclosure to a government or law enforcement agency for purposes of (a) and (b). This matters for physicians in county health systems, public hospital districts and correctional health.

(f) Civil penalty. In addition to other remedies, an employer is liable for a civil penalty not exceeding $10,000 per employee for each violation, awarded to the employee who was retaliated against. In assessing it the Labor Commissioner considers the nature and seriousness of the violation based on evidence obtained during the investigation, including the type of violation, the economic or mental harm suffered, and the chilling effect on the exercise of employment rights in the workplace.

(g) The privilege carve-out. The section does not apply to rules, regulations or policies that implement — or to actions against employees who violate — the confidentiality of the lawyer-client privilege under Evidence Code Article 3 (commencing with section 950), the physician-patient privilege under Article 6 (commencing with section 990), or trade secret information.

(h) Family members. An employer shall not retaliate against an employee because the employee is a family member of a person who has, or is perceived to have, engaged in protected acts.

(i) Who counts as the employer. “Employer” or “a person acting on behalf of the employer” includes, but is not limited to, a client employer as defined in Labor Code section 2810.3(a)(1) and an employer listed in section 6400(b).

(j) Fees. The court is authorised to award reasonable attorney’s fees to a plaintiff who brings a successful action.

The physician-patient privilege carve-out deserves care

Subdivision (g) is the provision most likely to catch a physician, and it cuts in an unexpected direction. The instinct in a safety dispute is to bring the record — to attach the chart that proves the harm. Subdivision (g) removes section 1102.5 protection from actions taken against an employee who violates the confidentiality of the physician-patient privilege.

The distinction is between the concern and the evidence for it. Reporting that a ward is unsafely staffed, that a colleague is operating impaired, or that a billing practice is unlawful does not require disclosing privileged patient information to the recipient. Taking identified records home, or sending them to a journalist, is a separate act that subdivision (g) does not protect. The safer channel is the one the statute names: a government agency, a public body conducting an investigation, or a person with authority to correct the problem — recipients who can lawfully receive clinical detail through their own processes.

Staffing agencies, locums and dual employers

Subdivision (i) matters to any physician working through an agency or a staffing company. By defining “employer” to include a client employer under section 2810.3(a)(1), the section reaches the entity where the physician actually works as well as the one that issues the paycheque. A locum tenens physician who raises a safety concern at a hospital and is then removed from the assignment is not confined to a claim against the agency.

“Reasonable cause to believe,” and what it does not require

Subdivisions (a) and (b) both condition protection on the employee having reasonable cause to believe that the information discloses a violation of a state or federal statute, or a violation of or noncompliance with a local, state or federal rule or regulation. Two things follow from the way that is drafted.

The test is directed at the employee’s belief and its reasonableness, not at the ultimate legal question. The statute does not say “discloses a violation”; it says the employee has reasonable cause to believe it does. A physician who reports a practice they reasonably understood to be unlawful is within the language even if the practice turns out, on fuller analysis, to have been lawful.

The subject matter is also drawn very wide. It is not confined to patient safety, to health law, or to conduct by the employer that harms the employee. Any state or federal statute, and any local, state or federal rule or regulation, is within it. Billing, licensing, environmental, employment, privacy and safety concerns are all capable of qualifying, which is why section 1102.5 is materially broader in subject matter than section 1278.5’s focus on the care, services and conditions of a facility.

What the phrase does not do is settle how a court weighs an unreasonable but sincere belief, or a belief about conduct that no statute in fact addresses. Those are questions of construction on which no authority is cited here.

A drafting asymmetry: what counts as retaliation

Section 1278.5(d)(2) defines discriminatory treatment expansively — discharge, demotion, suspension, any unfavourable changes in or breach of the terms or conditions of a contract, employment or privileges, or the threat of any of these actions. Section 1102.5 contains no equivalent definition. It prohibits an employer from retaliating and leaves the content of that word to be worked out.

The asymmetry cuts in an unexpected direction. Section 1278.5, the statute with the weaker evidentiary device, is the one that expressly captures threats and changes to privileges falling short of dismissal. A physician whose complaint is met with a warning, a schedule change, or a restriction on scope has a clearer textual hook under section 1278.5 than under section 1102.5, notwithstanding that section 1102.5 would give them the stronger burden framework if the action qualified.

Section 1102.6: the reason section 1102.5 is formidable

Labor Code section 1102.6 is a single sentence, and it is the most consequential sentence in this area. In a civil action or administrative proceeding brought pursuant to section 1102.5, once it has been demonstrated by a preponderance of the evidence that an activity proscribed by section 1102.5 was a contributing factor in the alleged prohibited action against the employee, the employer shall have the burden of proof to demonstrate by clear and convincing evidence that the alleged action would have occurred for legitimate, independent reasons even if the employee had not engaged in protected activity.

Three features distinguish this from ordinary retaliation analysis. The employee’s showing is contributing factor, not sole or substantial cause — the protected activity need only have contributed. The burden that then moves to the employer is a burden of proof, not of production, so it does not evaporate when the employer offers an explanation. And the standard is clear and convincing evidence, which is higher than the preponderance standard that governs most civil questions.

The California Supreme Court confirmed in Lawson v. PPG Architectural Finishes, Inc. (2022) 12 Cal.5th 703 that section 1102.6 governs claims under section 1102.5, rather than the federal McDonnell Douglas burden-shifting framework that some courts had applied. That decision was not read at source for this page and is identified rather than relied on; the statutory text itself states its own application to section 1102.5 proceedings.

Section 1278.5, and where it is stronger

The detail of Health and Safety Code section 1278.5 — its coverage of medical staff, the 120-day and 180-day presumptions, the burden-of-production limit in subdivision (e), the peer review injunction in subdivision (h) and the inspector-access right in subdivision (n) — is set out on who controls clinical judgment. What matters for choosing a route is where it does something section 1102.5 cannot.

It reaches non-employees. Section 1278.5(b)(1) covers a patient, employee, member of the medical staff, or other health care worker of the health facility. A physician with privileges and no employment contract has no section 1102.5 claim against the facility and does have a section 1278.5 claim.

It treats privileges as the protected interest. Section 1278.5(d)(2) defines discriminatory treatment to include unfavourable changes in, or breach of, the terms or conditions of a contract, employment, or privileges — or the threat of any of those. Section 1278.5(g) then entitles a medical staff member to reinstatement and to reimbursement for lost income resulting from any change in the terms or conditions of privileges.

It reaches the owner as well as the facility. Section 1278.5(b)(2) prohibits retaliation by an entity that owns or operates the facility, or that owns or operates any other health facility — which addresses retaliation across a multi-facility system.

It carries public penalties. A violation is subject to a civil penalty of up to $25,000 under subdivision (b)(3), and a wilful violation is a misdemeanour punishable by a fine of up to $75,000 under subdivision (f).

Choosing between them, or using both

The same concern, two statutory routes
  Health & Saf. Code § 1278.5 Lab. Code § 1102.5
Who is covered Patients, employees, members of the medical staff, other health care workers of a health facility Employees, including of a client employer under § 2810.3(a)(1)
Subject matter Care, services or conditions at the facility Any state or federal statute, or any local, state or federal rule or regulation
Evidentiary device Rebuttable presumption at 120 days — burden of production only, per subd. (e) and Evid. Code § 603 Contributing factor, then employer bears the burden of proof by clear and convincing evidence (§ 1102.6)
Protected interest Employment, contract terms, and privileges — including threats Employment
Money Civil penalty up to $25,000; wilful violation a misdemeanour up to $75,000; reinstatement, lost income, legal costs Civil penalty up to $10,000 per employee per violation, awarded to the employee; attorney’s fees under subd. (j)

An employed hospital physician is frequently within both, and section 1278.5(m) provides that the section does not abrogate or limit any other theory of liability or remedy otherwise available at law. The routes are not mutually exclusive, and the reason to plead both is that they fail differently: section 1278.5 is vulnerable on the weakness of its presumption, section 1102.5 on whether the claimant is an employee at all.

A third protection, and why it is different in kind

For physicians in practices held by financial owners there is a protection that sits outside both whistleblower statutes. Health and Safety Code section 1191(d)(1)(B), operative from 1 January 2026, makes void any clause in a management or asset-sale contract with a private equity group or hedge fund that bars a provider from disparaging, opining, or commenting on the practice as to quality of care, utilization of care, ethical or professional challenges, or the investor’s revenue-increasing strategies. The provision’s scope, its savings and its relationship to Business and Professions Code section 16600 are set out on restrictive covenants.

What matters here is the one respect in which it protects speech that neither whistleblower statute does. Sections 1102.5(a) and (b) condition protection on the employee having reasonable cause to believe the information discloses a violation of a statute, rule or regulation. Section 1278.5 attaches to a grievance, complaint or report about care, services or conditions. Both are built around an allegation that something is wrong in a way the law recognises.

Section 1191(d)(1)(B) protects opining and commenting. A physician who says publicly that a practice’s utilization patterns are clinically questionable, or that an investor’s revenue strategy is putting pressure on care, is not necessarily alleging a violation of anything — and may have no reasonable cause to believe a statute has been broken. That speech falls outside the reasonable-cause condition in section 1102.5 and may fall outside section 1278.5’s subject matter, while sitting squarely inside what section 1191(d)(1)(B) protects.

The mechanism also differs. The whistleblower statutes supply a remedy after retaliation has occurred; they require the physician to act. Section 1191(d)(2) makes the offending clause void by operation of law, so the restraint is inoperative whether or not anyone ever sues. Its coverage is correspondingly narrower: it applies only where the counterparty is a private equity group or hedge fund as defined in section 1190, and only to the instruments subdivision (d)(1) names.

Reading your own agreements against these three

Taken together the three provisions give a physician a document-level checklist that does not depend on anything having gone wrong yet.

Any clause preventing disclosure. Section 1102.5(a) prohibits an employer from making, adopting or enforcing a rule, regulation or policy preventing protected disclosure. Confidentiality provisions, media and communications policies, and internal escalation protocols that on their face prevent an employee from going to a government agency or to a person with authority to correct a problem are within subdivision (a) as drafted, before any enforcement.

Any clause requiring internal exhaustion. Provisions requiring concerns to be raised internally before any external report do not sit comfortably with subdivision (a), which protects disclosure to a government or law enforcement agency and to a public body without qualification.

Any non-disparagement clause in a management or asset-sale contract. If the counterparty is a covered entity, section 1191(d) makes the offending clause void — and the instrument to check is frequently one the physician did not sign.

Anything that survives departure. Restraints on a physician’s practice after leaving raise separate questions under Business and Professions Code section 16600, addressed on restrictive covenants. A clause can be void under section 16600, void under section 1191(d), and evidence of an unlawful policy under section 1102.5(a), all at once.

What actually decides these cases

Both statutes reward the same preparation, for the same reason: each turns on what a decision-maker knew and when.

Knowledge is an element in practice. The section 1278.5(d)(1) presumption requires that responsible staff at the facility or the owning entity had knowledge of the protected activity. Under section 1102.6 the employee must show the protected activity was a contributing factor, which likewise requires that whoever acted knew of it. A concern raised to someone with no role in the later decision creates a proof problem regardless of how serious the concern was.

Timing is a starting point, not a case. The 120-day presumption dissolves once the facility produces a reason. Section 1102.6 has no time trigger at all. Neither statute rewards a claimant whose only evidence is sequence.

The channel matters. Both statutes describe recipients. Section 1102.5 names a government or law enforcement agency, a person with authority over the employee, another employee with authority to investigate, discover or correct, and any public body conducting an investigation, hearing or inquiry. Section 1278.5 names the facility, an accrediting or evaluating entity, the medical staff, and any governmental entity. A concern raised outside those channels may be entirely reasonable and still sit outside the protection.

Independent grounds are the employer’s strongest answer. Section 1102.6 asks whether the action would have occurred for legitimate, independent reasons anyway. Documented performance issues predating the disclosure are the material that satisfies it, which is why the interval between a concern and the first written criticism is so often the contested fact.

Who can be a defendant, and who cannot

Both statutes are drafted around a defendant, and the two describe different people.

Section 1102.5 binds “an employer, or any person acting on behalf of the employer.” The phrase reaches individuals as well as entities: a supervisor, a department chair, or a manager acting on the employer’s behalf is within the language of the prohibition. Subdivision (i) then extends “employer” to include a client employer as defined in Labor Code section 2810.3(a)(1) and an employer listed in section 6400(b), which is what brings agency and staffing arrangements within reach.

Section 1278.5 is drafted around the facility rather than the employment relationship. Subdivision (b)(1) binds the health facility; subdivision (b)(2) separately binds an entity that owns or operates that facility, or that owns or operates any other health facility. Subdivision (i) then defines “health facility” to include the facility’s administrative personnel, employees, boards, committees of the board, and medical staff.

That last definition is worth pausing on, because it means the medical staff is part of the entity the section binds. A physician retaliated against through a medical staff process is not outside the statute on the basis that the medical staff is self-governing; the statute has already placed it inside the defined facility. Subdivision (l) preserves the medical staff’s ability to carry out legitimate peer review under Business and Professions Code sections 809 to 809.5, which is the boundary rather than an exemption.

What neither statute reaches directly is a management services organisation that is not the employer and not the facility. Where the pressure comes from that direction, the operative provisions are the ones discussed on who controls clinical judgment.

Before you raise a concern

Nothing here is advice about a particular situation, and a physician contemplating a report should take their own. But the statutory text supports several observations that are simply about how these provisions are built.

Identify which statute you are in before choosing a recipient. If you are a medical staff member without an employment contract, section 1102.5 is unlikely to help you against the facility and section 1278.5 is your route — which means the recipient list that matters is the facility, an accrediting or evaluating entity, the medical staff, or a governmental entity. If you are an employee, section 1102.5’s wider subject matter and stronger burden framework are available, and internal disclosure to a person with authority to correct the problem is protected.

Put it in writing, and keep your own copy. Both statutory devices turn on a filing and on knowledge. The section 1278.5(d)(1) presumption runs from the filing of the grievance or complaint and requires that responsible staff knew. Section 1102.6 requires the protected activity to have been a contributing factor, which requires the decision-maker to have known of it. A verbal concern raised in a corridor satisfies neither evidentiary structure well.

Name the problem, not the patient. Section 1102.5(g) withdraws protection from actions taken against an employee who violates the physician-patient privilege. Describe the condition, the practice, or the pattern; let the recipient obtain clinical detail through its own lawful process.

Expect the independent-grounds defence. Section 1102.6 lets the employer escape by proving it would have acted anyway for legitimate, independent reasons. The contemporaneous record of your performance before the disclosure is, in practice, part of the case.

Do not rely on timing. The 120-day presumption is a presumption affecting the burden of producing evidence. It is a useful procedural device and it is not a case.

What this page does not decide

First, it does not address the federal False Claims Act retaliation provision or the California False Claims Act, which protect a different act — conduct in furtherance of a qui tam action — and carry their own remedies. Where a concern involves billing to a government payor, that regime should be considered alongside these two.

Second, it does not address the Fair Employment and Housing Act, which provides separate anti-retaliation protection for reporting discrimination or harassment.

Third, limitation periods are not stated here. They differ between the two statutes and between civil and administrative routes, a claim-presentation requirement may apply where the employer is a public entity, and overlapping claims may carry shorter deadlines. Nothing on this page should be read as indicating how long a physician has.

Fourth, Lawson v. PPG Architectural Finishes, Inc. (2022) 12 Cal.5th 703 and People ex rel. Garcia-Brower v. Kolla’s, Inc. are identified but were not read at source; the statutory propositions on this page rest on the text of sections 1102.5, 1102.6 and 1278.5.

Fifth, this page states the framework. Whether a particular sequence of events amounts to retaliation is a question of fact on which nothing here can be relied on.

Sources

  1. Cal. Lab. Code § 1102.5(a)–(j) — current text: anti-gag provision (a); retaliation including anticipatory (b); refusal to participate (c); former employment (d); government employees (e); $10,000 civil penalty and assessment factors (f); lawyer-client, physician-patient and trade secret carve-out (g); family members (h); client employer definition (i); attorney’s fees (j).
  2. Cal. Lab. Code § 1102.6 — contributing-factor framework; employer bears the burden of proof by clear and convincing evidence.
  3. Cal. Health & Safety Code § 1278.5(a)–(n) — facility whistleblower protection; medical staff coverage; presumptions at (c) and (d); burden of production under Evid. Code § 603 at (e); penalties at (b)(3) and (f); remedies at (g); other remedies preserved at (m).
  4. Cal. Lab. Code § 2810.3(a)(1) — client employer definition, incorporated by § 1102.5(i).
  5. Cal. Evid. Code § 603 — presumptions affecting the burden of producing evidence.
  6. Cal. Health & Safety Code § 1191(d), and the covered-entity definitions at § 1190 — added by SB 351 (Cabaldon), Ch. 409, Stats. 2025, chaptered text; operative 1 January 2026. Non-disparagement clauses void in management and asset-sale contracts with a private equity group or hedge fund; treated on restrictive covenants.
  7. Cal. Bus. & Prof. Code § 16600 — general prohibition on restraints; referenced for contrast only, treated on restrictive covenants.
  8. Cal. Evid. Code §§ 950 et seq. and §§ 990 et seq.; Cal. Lab. Code § 6400(b) — cross-referenced inside the text of Lab. Code § 1102.5(g) and (i). Not read at source.
  9. Lawson v. PPG Architectural Finishes, Inc. (2022) 12 Cal.5th 703 — identified for the proposition that § 1102.6 governs § 1102.5 claims. Not read at source.

Related analysis