A brief overview of organizations' obligations to protect personal data in whistleblowing processes, after the Directive 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law came into force on December 17, 2021 (the EU Whistleblower Directive). This article was originally published on the website of Dentons on March 3, 2022.