CRUCIAL OBLIGATIONS OF THE PERSONAL DATA CONTROLLER TO THE PROTECTION OF THE IDENTITY OF WHISTLEBLOWERS UNDER THE LAW OF 14.06.2024. ON THE PROTECTION OF WHISTLEBLOWERS

The effective functioning of the whistleblowing system requires action on the part of several entities – both private and public – that process personal data while carrying out the tasks entrusted to them. One of the basic conditions for the successful implementation of mechanisms for the protection of whistleblowers, is to ensure that their identity and that of other participants in internal investigations are properly protected, and thus retaliatory actions are not taken against them. An important role for the achievement of this goal, performs on the basis of the newly enacted regulations in Poland, adequate formation of provisions on the protection of personal data, hence the subject of this article became their analysis and evaluation. Its scope, due to the formal framework of the article, has been limited. First – the focus was on those obligations of administrators that directly or indirectly affect the provision to whistleblowers of adequate protection of their identity, and second – the perspective of legal entities was adopted, as the most numerous groups of administrators, applying the discussed regulations in the framework of receiving and handling internal notifications. The research method used in this study was the dogmatic-legal method.