Personal data protection challenges in the process of whistleblowing

The authorized persons are the first contact points for whistleblowers. They are receiving a whistleblowing information and, from that point on, are responsible for protecting personal data along the process. In order to perform their duty, they can seek for an assistance from a person authorized for the protection of personal data within their organizations.

The Project "Prevention and fight against corruption" prepared an analysis of risks related to collection and processing of personal data in the process of whistleblowing. By effectively protecting personal data of whistleblowers and alleged culprits, it is possible to gain trust in the process and expect positive changes.

The analysis considered issues related to the confidentiality of data on whistleblowers and accused persons; reasonable data collection and processing; right to information on how personal data is handled in the process of whistleblowing; right to access information; period of storage of collected and produced data and reports; data security; technical and organizational risks/measures; etc.