The EU Whistleblower Directive and its implications for data protection