It's not really possible to give specific advice, based on what you have told us. As others have said, if you have a DPO or legal team then it needs to be escalated to them. You will need to share the full context of the comments with them, to enable them to form an opinion.