Summary

  • DHS's inspector general substantiated eleven retaliation cases in a reviewed 2018–2025 cohort. The Secretary missed the applicable 30-day deadline to decide on corrective action in all eleven.
  • Six cases still lacked that decision in May 2026. DHS officials told GAO there was no written handoff process and no designated official responsible for keeping the decision on time.
  • The watchdog's investigation was slow as well: 39 of 73 closed cases took more than three years. A late decision after a late investigation compounds the wait for a remedy.

The finding reached the door. The decision did not.

A federal whistleblower can spend years persuading an inspector general that retaliation occurred. For the eleven cases substantiated in the Government Accountability Office's September 2026 audit, that finding did not close the matter. It started another duty: the Secretary of Homeland Security had to decide whether to take corrective action within 30 days of receiving the relevant report. Every one of the eleven decisions missed that statutory deadline.

By May 2026 the Secretary had made a determination in five cases. Six still waited. The elapsed time after the inspector general's report ran from about four months to more than two years across the eleven. The six pending cases had already spent ten months to more than two years awaiting the Secretary's decision. The government's protected-disclosure process had established an injury and then lost its own timetable for deciding what to do about it.

These are two institutional stages with different jobs. DHS's Office of Inspector General investigates; the Secretary determines corrective action after a substantiated report. The 30-day law attaches to the second stage. It does not turn the inspector general into the remedy authority, and it does not require the Secretary to order the same remedy in every case. It does require a decision. A department that can identify the official with authority but cannot identify the official responsible for moving the case has separated power from the operating duty that makes power usable.

A case can wait between desks for sixteen months

GAO found an unusually plain example in a Federal Protective Service contractor case. The inspector general transmitted its report to the Office of the Secretary in October 2024. Federal Protective Service officials told GAO they received the report in February 2026. The interval was about sixteen months. DHS officials attributed the delay to staff turnover, including retirements and changes associated with a new administration. By May 2026, a proposed order still had internal reviews ahead of the Secretary's final decision.

The dates matter more than the excuse. A report can be complete at the investigative end and unavailable to the office expected to propose a response. The department's obligation continues through personnel changes. Yet DHS officials told the auditors there was no written process for routing substantiated reports into proposed corrective actions, and no designated official accountable for making sure a final decision arrived on time. A legal clock without an owner is an elegant way to measure delay after it has happened.

Another case shows the same defect from a different direction. The inspector general sent a FEMA contractor report to the Secretary's office in February 2024. FEMA provided a proposed order in April 2024. Officials in the succeeding administration told GAO in January 2026 that they had not yet received a copy of the investigation report. By May 2026 FEMA counsel had it and had drafted a proposed order; further review still lay between that work and the Secretary. Those public facts establish a broken handoff, not anyone's private motive.

The first clock was already running slowly

Before any file reached the Secretary, the inspector general's Whistleblower Protection Division had its own backlog. GAO examined 73 cases opened and closed in fiscal years 2018 through 2025; 39 took more than three years to investigate. OIG officials pointed to complex cases and limited staffing and said they had emphasized thoroughness over speed. The office's policy called for timely review, but it had not defined a measurable timeliness objective or evaluated performance against one.

Speed alone would be a poor substitute for an accurate investigation. The problem is a process that cannot say how long a complainant will wait, then fails to meet the exact deadline once it has a substantiated result. Delay in the investigation and delay in the remedy decision are different failures; together they can leave a successful finding years away from a useful correction. GAO's report does not publish a current outcome for the six cases that remained undecided in May 2026. A dated Secretary determination for each would change that status.

GAO recommended three concrete actions: make OIG investigation timeliness measurable and monitor it; decide the six pending substantiated cases; and write a decision procedure with a named responsible official. DHS and its inspector general agreed. The recommendations are modest because the institutional gap is modest in size but large in consequence: establish who receives the report, who drafts the response, who owns the deadline and when the Secretary decides. The law already supplied the number 30. DHS still needed to supply the route.

Sources