If you rock the boat, the system will find a way to retaliate against you, unless you find a way to remain anonymous. Having a formal process for whistleblower

If you rock the boat, the system will find a way to retaliate against you, unless you find a way to remain anonymous. Having a formal process for whistleblower reporting which protects the whistleblower looks good on paper, but in practice it seems that the concerns often go into a black hole and the paper protections aren't a practical shield against retaliation. The takeaway? Be very paranoid; if you're thinking of being a whistleblower, you need to either find ways to raise your concerns anonymously, or be prepared for whatever powerful people you threaten to do their best to ruin your life. Which means either finding someone more powerful to protect you, or accepting that if you do the right thing, there will almost certainly be very serious consequences for you, but only a small chance of meaningful positive change. If I ever personally was in a situation like this and decided I saw something that needed to be reported, I'd go the first route -- total anonymity. I deeply respect people like Snowden who choose martyrdom instead, but I like living a comfortable life too much to be willing to sacrifice it for my principles.