Privacy, GDPR e whistleblowing