I'll respond initially. If you look at the countries that have done the best job, their whistle-blower legislation is sector-blind. In other words, it doesn't matter where you are and whom you've worked for, the same kinds of rules apply. That's the most effective way. The problem getting there is that you may get significant push-back from powerful corporations who are doing nasty things.
It's good idea. If you look at the laws that work well in other countries, then they certainly provide very strong mechanisms for digging in and investigating, and serious consequences, especially for taking reprisals.