when you say "is required by the law", I think the specific law is somewhat implied, and the audience should know which law you are talking about.

In this article, "is supposed to be protected by law" is a vague impression because we are not sure if China does have such a law, or which law to protect whisleblowers.

Also, "protected by law" is used a lot, if you google it.