The Intelligence Community Whistleblower Protection Act of 1998 established a narrow process for intelligence employees and contractors to report an “urgent concern” to an agency inspector general, the Intelligence Community Inspector General, and ultimately the congressional intelligence committees. The ICIG must assess whether a complaint appears credible within 14 days; if it does, the agency head or Director of National Intelligence must send it to Congress within seven days. If officials decline to transmit it, the whistleblower may approach the intelligence committees directly, but only after following the Act’s notice procedures.
The law’s central weakness was that it created no court or administrative process for challenging employment retaliation. In 2006, Acting Defense Department Inspector General Thomas Gimble told the House Committee on Government Reform that the statute was a “misnomer” because it primarily protected the communication of classified information to Congress. Brennan Center analyst Michael German later summarized the gap as a right to report internally “but no remedy when that right is infringed.” According to the Office of the Director of National Intelligence, 10 complaints or disclosures were filed from 1999 through 2009; four were deemed credible, while whistleblowers alleged retaliation in three cases. Subsequent CIA and Justice Department investigations reported finding no retaliation, and later protections—including Presidential Policy Directive 19 and the Fiscal Year 2014 Intelligence Authorization Act—were added to address the limitations.