Private sector must do more to protect whistleblowers, according to new independent report