Set by the law · Directive 2019/1937 Art. 5(7)
Whistleblowing
In plain English
Reporting breaches of EU law learned at work. The Whistleblower Directive protects people who report, including breaches of data protection law, and reports must themselves be handled in line with the GDPR.
The official text
‘reporting person’ means a natural person who reports or publicly discloses information on breaches acquired in the context of his or her work-related activities
protection of privacy and personal data, and security of network and information systems
Any processing of personal data carried out pursuant to this Directive, including the exchange or transmission of personal data by the competent authorities, shall be carried out in accordance with Regulation (EU) 2016/679 and Directive (EU) 2016/680.
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.