10. A person authorized to receive the information shall be required to protect the whistleblower’s personal data and any data that may be used to discover the identity of the whistleblower, unless the whistleblower agrees to reveal such personal data in accordance with the law regulating personal data protection.
Any person who learns about the data referred to in paragraph 1 of this Article shall be required to protect such data.
A person authorized to receive the information shall be required to, at the time of receiving such disclosure, notify the whistleblower that his identity may be revealed to a competent authority if actions of that authority cannot be undertaken without revealing the identity of the whistleblower, and notify the whistleblower of the safeguards available to participants in criminal proceedings.
Where it is necessary to reveal the identity of a whistleblower in the course of proceedings, the person authorized to receive the information shall be required to notify the whistleblower of this fact before revealing the whistleblower’s identity.
Data referred to in paragraph 1 hereof may not be revealed to any person named in the information, unless otherwise provided by other law.
Referenced Legislation: Law on the Protection of Whistleblowers (2014)