Whistleblower Protection and the Right of Access
Synthesising the EU Whistleblower Directive and Art. 15 GDPR
- 2025
- Buch
- Verfasst von
- Stephan Koloßa
- Buchreihe
- SpringerBriefs in Law
- Verlag
- Springer Nature Switzerland
Über dieses Buch
Über dieses Buch
This brief addresses the contested relationship between an individual’s right of access to his or her personal data under data protection law and the protection of a whistleblower’s identity. Both rights turn out to be cornerstones in their relevant fields. Balancing said rights can be a challenging endeavour, in particular for corporations in practice as an improper balancing could lead to severe sanctions.
The right of access has become the most basic of all rights that an individual has under the General Data Protection Regulation (GDPR). An individual must be given proper access to his or her personal data in order to enable him or her to exercise control over that data and decide upon claiming further rights such as the right of rectification or the right of erasure. It is not surprising that the right of access has turned out to be contentious and it continues to be at the core of numerous European Court of Justice (ECJ) decisions.
The protection of whistleblowers has by now evolved into an equally important right. Whereas snitches had been frowned upon in several cultures for a long time, the crucial role of whistleblowers has been acknowledged by now under human rights law as well as prominently by the European Whistleblower Protection Directive. Probably the most essential right for the functioning of the whistleblower mechanism is the proper handling of the whistleblower’s identity. The confidentiality of the whistleblower’s identity is the foundation for the whole reporting system, as otherwise retaliation against the whistleblower is likely to follow.
However, there may be instances where the individual’s right of access and the whistleblower’s right to his or her protection collide. Balancing these rights can become extremely challenging for an employer when faced with following up on a whistleblower’s allegations while the accused perpetrator claims access to all information on him or her and particularly the whistleblower’s name. This brief describes the development of both rights and offers solutions as well as practical advice to the employer's quandary when it tries to comply with both data protection law and whistleblower protection.
Inhaltsverzeichnis
-
Frontmatter
-
1. Introduction
Stephan KoloßaAbstractThe past has shown that fraudulent schemes both in the business context and in the public sector, often remain undetected and without consequence for a significant period of time. This is also true for situations in which the misconduct occurs on a large scale. In the case of the so-called Panama Papers, the Panamanian law firm Mossack Fonseca assisted various public figures like politicians, football officials, billionaire entrepreneurs and celebrities in illegally moving their money out of the reach of the tax authorities of that state where they gained their profits. -
2. Protection of Whistleblowers’ Confidentiality Under European Law
Stephan KoloßaAbstractIn recent years, the number of illegal actions in particular at the corporate level has grown, or at least the number of cases that came to light, increased. Such misconduct has often only been exposed because brave informants have risked a great deal in order to put an end to it. Hence, it is no surprise that whistleblower protection has come into focus. If violations of law and order go undetected and unpunished for years because employees of a company fear to report illegal activities for fear of reprisals or consequences, it can have several negative effects. It can harm the company itself, but also third-parties, the economy in general, public procurement programs, the general public, and even the rule of law could be affected. Protecting those who would assist in reducing unlawful or even criminal behaviour has two main functions: Protecting the individual’s actions as well as protecting the public good. A well-balanced whistleblower protection may have positive effects on both of these. -
3. The Right of Access under European Data Protection Law
Stephan KoloßaAbstractIn the current regime of European data protection law, the General Data Protection Regulation (GDPR) is the dominating legal foundation. The right to data protection is enshrined in Art. 8 EU Charter and constitutes a fundamental right. This fundamental right is regarded as a right that is separate from the right to privacy, which is provided for in Art. 7 EU Charter. As the right to data protection has become such a cornerstone in the area of digital rights and daily life, the GDPR sets up more concrete and more concrete and strict rules. -
4. Synthesizing the Confidentiality of Whistleblowers and the Right of Access
Stephan KoloßaAbstractBased on the above-mentioned dilemma regarding the whistleblower’s protection under EU and the Council of Europe law on the one hand and the data protection right of access under EU law on the other hand, the question arises under what conditions is an employer obliged in an individual case to provide the desired information to the data subject and to what extent must the employer protect the confidentiality of the whistleblower’s identity. The fact that these two rights may directly clash has already been foreseen by the legislator of the Whistleblower Protection Directive. -
5. Conclusion and Outlook
Stephan KoloßaAbstractOverall, it is easy to conclude that the data protection right of access is generally designed as a strong claim that lies at the heart of the data subjects’ rights under the General Data Protection Regulation (GDPR). On various occasions, the European Court of Justice (ECJ) confirmed that only a stark and robust right of access enables the data subject to control his or her data and make use of the other rights under the GDPR such as the right to correction, erasure, or to data portability.
- Titel
- Whistleblower Protection and the Right of Access
- Verfasst von
-
Stephan Koloßa
- Copyright-Jahr
- 2025
- Verlag
- Springer Nature Switzerland
- Electronic ISBN
- 978-3-032-04817-2
- Print ISBN
- 978-3-032-04816-5
- DOI
- https://doi.org/10.1007/978-3-032-04817-2
Die PDF-Dateien dieses Buches wurden gemäß dem PDF/UA-1-Standard erstellt, um die Barrierefreiheit zu verbessern. Dazu gehören Bildschirmlesegeräte-Unterstützung, Lesezeichen für eine einfache Navigation, tastaturfreundliche Links und Formulare sowie durchsuchbarer und auswählbarer Text. Wir sind uns der Bedeutung von Barrierefreiheit bewusst und freuen uns über Anfragen zur Barrierefreiheit unserer Produkte. Bei Fragen oder Bedarf an Barrierefreiheit kontaktieren Sie uns bitte unter accessibilitysupport@springernature.com