Personal data refers to any information related to an identifiable individual. The terms personal information or personally identifiable information are also used. Reporting on organisational misconduct opens up questions regarding the personal data of whistleblowers, as well as of those affected and any related witnesses. Data privacy thus plays a key role in how whistleblower solutions are designed. Organisations must account for potential penalties related to non-compliance with existing regulations, such as GDPR in Europe.