The aim of whistleblowing is to shine the light on corruption by providing safe channels for staff or other informants to report unethical behaviour in the workplace. Such procedures require the processing of sensitive personal information relating to suspected wrongdoers, whistle-blowers, and other parties, such as witnesses. EU institutions and bodies are obliged to have clear whistleblowing procedures in place. The obligation is placed upon them by the EU Staff Regulations, which state that officials who become aware of a possible illegal activity should report it without delay. Due to the specificity of this procedure and risks imposed on the persons involved, the protection of their personal data is of the utmost importance.