Skip to main content

Investigative Reporter Toolkit

If you are working on investigations in the UK — whether long-form exposes, corporate accountability, public interest disclosures or data-driven investigations — this toolkit curates the OSINT guides, source protection tools, legal resources and templates you need. The Investigative Journalism hub has 30 sub-pages; this page tells you where to start.

Last reviewed: Next review due:

Start here

Investigative journalism in the UK rests on three pillars: rigorous verification, robust source protection, and legal resilience. Without verification, you risk publishing something false. Without source protection, you endanger the people who trusted you. Without legal resilience, you expose your publication to defamation claims, injunctions or contempt proceedings that kill the story before it runs.

Start with the OSINT toolkit to understand what's publicly available in the UK. Then build your source protection setup — even if you have no active source yet. When you are ready to publish, the verification workflow and publishing guide will walk you through the pre-publication process.

Core guides for you

OSINT toolkit UKCompanies House, Land Registry, Charity Commission and UK-specific open data sources.Working with whistleblowersReceiving, verifying and protecting whistleblower information in the UK.Secure source handoversSecureDrop, OnionShare and Signal protocols for document handover.Document analysisReading company accounts, contracts and planning records as an investigator.Corporate investigations UKPSC register, beneficial ownership, FCA and Companies House deep-dives.Verification workflowsMulti-source verification before publication: a step-by-step framework.Publishing an investigationRight-of-reply timing, pre-publication legal, and lessons from major UK cases.Source protection (Law hub)Legal protections for sources under the Contempt of Court Act and PACE.Political investigations: lobbying registersConsultant Lobbyists Register, Electoral Commission data and Members' Interests for political investigations.Police misconduct investigationsIOPC reports, misconduct hearings, barred list and FOI routes for investigating UK police.Tax and finance investigationsHMRC public data, Companies House accounts analysis and offshore ownership registers.Verification workflows in breaking newsAccelerated verification under deadline: minimum bar standards and what cannot be skipped.

Recommended tools

Source Protection Checklist
Assess how well you have protected a source before publication: communications, metadata, document handling.
Source Verification Checklist
A 12-question checklist to verify sources — designed for the higher bar required in investigations.

Tools you'll use weekly

Security and verification tools for investigative reporters handling sensitive material and sources.

Source Verification Checklist
A 12-question checklist to verify sources — designed for the higher corroboration bar required in investigations.
Source Protection Checklist
Assess how well you have protected a source before publication: communications, metadata, document handling and legal exposure.
Password Strength Checker
Verify that passwords protecting sensitive investigation files and encrypted communications meet current security standards.

Blog posts you should read

Investigative Journalism Techniques UKPractical methods for source development, document research and data analysis.Whistleblower Protection for JournalistsLegal protections for whistleblowers and how journalists can safely receive information.SLAPPs & UK ReportersStrategic lawsuits against public participation and how to respond.Digital Security for UK JournalistsProtecting your devices, sources and communications from surveillance.How to File an FOI Request in the UKStep-by-step FOI guide — essential for any UK investigation.

Templates that save you time

Investigative Reporter PackSource contact log, document tracking sheet and investigation planning template.Digital Security PackDevice security checklist, source communications guide and password audit sheet.

FAQs for investigative reporters

What legal protections exist for journalist sources in the UK?
Section 10 of the Contempt of Court Act 1981 gives journalists a right to refuse to disclose sources unless a court is satisfied that disclosure is necessary in the interests of justice, national security, or the prevention of disorder or crime. The Police and Criminal Evidence Act 1984 (PACE) creates additional safeguards by requiring police to obtain a production order from a circuit judge before accessing journalistic material. RIPA and IPA powers may also apply in state surveillance contexts.
How should I receive documents from a whistleblower?
Use end-to-end encrypted channels: SecureDrop (for organisations running it), Signal for direct messaging, or OnionShare for file transfer. Strip metadata from any files before publishing or sharing. Do not discuss the source over unencrypted email, phone calls or standard messaging apps. The Digital Security hub has detailed guidance on each of these tools.
What is the UK FOI Act useful for in investigations?
The Freedom of Information Act 2000 applies to public authorities in England, Wales and Northern Ireland (Scotland has its own FOISA). It can surface spending data, contracts, correspondence, inspection reports, complaints data and much more. FOI works best as one strand of a broader investigation rather than a sole source. The 20-working-day deadline and numerous exemptions mean it requires forward planning: file early, file specifically, and know your appeal routes.
What right-of-reply obligations apply before publishing an investigation?
There is no absolute legal requirement to offer a right of reply, but best practice and the IPSO Editors' Code standard requires that subjects of significant allegations have a reasonable opportunity to respond before publication. The right-of-reply letter should set out the allegations specifically, give a realistic deadline (usually five to ten working days for a major investigation), and be preserved as evidence. Never give so much detail that you expose a confidential source.
When is undercover reporting justified in the UK?
The IPSO Editors' Code (Clause 10) permits subterfuge and deception only when the information cannot be obtained by other means and when there is a genuine public interest. NUJ guidance adds that the deception must be proportionate to the story. Covert recording carries additional legal considerations under RIPA. The Ethics hub's undercover reporting guide covers the full framework.
Where do I find lobbying and political finance records for a political investigation?
The UK Register of Consultant Lobbyists (maintained by the Registrar of Consultant Lobbyists) lists firms registered under the Transparency of Lobbying Act 2014. The Electoral Commission website publishes donations and loans to political parties and regulated campaigners. The Register of Members' Interests is published by Parliament. For all-party parliamentary groups, the APPG register is updated quarterly. Cross-reference these with Companies House to trace corporate connections.
How do I investigate potential police misconduct in the UK?
Start with the Independent Office for Police Conduct (IOPC): its published reports, learning recommendations and misconduct hearings are all public documents. Police misconduct hearings are generally open to the press since 2015. Gross misconduct findings are recorded in the College of Policing barred list. FOI requests to individual forces can surface disciplinary data, complaints statistics and use-of-force records. Be alert to contempt risk if linked criminal proceedings are active.

Common pitfalls for investigative reporters

  • 1
    Insecure source communications. Using unencrypted email, standard SMS or a work phone to communicate with a sensitive source is the single most common operational security failure in UK investigative journalism. Set up Signal with a disappearing messages timer, use a separate device for sensitive source contact, and ensure your source knows to do the same before exchanging any identifying information.
  • 2
    Publishing unverified document dumps. Receiving a large document haul from an anonymous source and publishing claims from it without independent verification is a serious professional and legal risk. Documents can be fabricated or selectively edited. Before any document becomes the basis of a published allegation, verify it against at least one independent source and, where possible, against the organisation that produced it.
  • 3
    Premature publication before legal review. Competitive pressure to publish before a rival outlet is the most common reason investigations go out without adequate legal review. An injunction, a defamation claim or a contempt finding after publication does far more damage to an investigation than a day's delay for legal sign-off. Build the legal read into the publication timeline from the start, not as an afterthought.
  • 4
    Over-specifying in the right-of-reply letter. A right-of-reply letter must be specific enough to give the subject a genuine opportunity to respond, but not so detailed that it exposes the identity of a confidential source or the structure of the investigation. Err toward specificity about the allegation (what, when, with whom) rather than about the evidence base (how you know, who told you).

Where to next

The Investigative Journalism hub is your primary home with 30 sub-pages. For secure communications, see the Digital Security hub. For data-driven investigations, pair this toolkit with the Data Journalist toolkit.

Go to Investigative Journalism hub →

Journalists who shaped investigative reporting

Reporters whose investigations changed UK law, politics and the press itself. Summaries are drawn from Wikipedia under CC BY-SA.

Nick Davies

Nick Davies (born 28 March 1953) is a British investigative journalist, writer, and documentary maker. Davies has written extensively as a freelancer, as well as for The Guardian and The Observer, and been named Reporter of the Year, Journalist of the Year and Feature Writer of the Year at the British Press Awards.

Summary adapted from the Wikipedia article on Nick Davies, licensed CC BY-SA 4.0.

Heather Brooke

Heather Rose Brooke (born 1970) is a British-American journalist and freedom of information campaigner.

Summary adapted from the Wikipedia article on Heather Brooke, licensed CC BY-SA 4.0.

Paul Foot (journalist)

Paul Mackintosh Foot (8 November 1937 – 18 July 2004) was a British investigative journalist, political campaigner, author, and long-term member of the Socialist Workers Party (SWP).

Summary adapted from the Wikipedia article on Paul Foot (journalist), licensed CC BY-SA 4.0.

Primary sources

Related guides

InvestigativeOSINT Toolkit UKRead →InvestigativeWorking with WhistleblowersRead →InvestigativeDocument AnalysisRead →SafetyThreat Modeling UKRead →Media LawSource ProtectionRead →TemplatesInvestigative Reporter PackRead →InvestigativeVerification WorkflowsRead →