https://www.epo.org/en/service-support/faq/about-us/reporting-wrongdoing/can-i-report-despite-my-professional-obligation

Can I report despite my professional obligation to maintain confidentiality?

Our employees and those who work in or on behalf of the EPO will not be liable for potential breaches of confidentiality when reporting allegations of wrongdoing in good faith. It is the responsibility of parties outside the EPO to assess whether they are bound by any confidentiality obligation or non-disclosure agreement, in particular with respect to national security or defence, professional secrecy, or vis-à-vis third parties in accordance with data protection regulations. These obligations or agreements may restrict reporting. National laws such as those implementing the EU Directive on Whistleblower Protection do not apply to the EPO but may provide further guidance on rights and obligations in relation to employers or other parties.