WHAT IS THE RECOURSE IF PERSONAL DATA
PROTECTION RIGHTS HAVEN'T BEEN RESPECTED?
THERE ARE THREE OPTIONS IF A CITIZEN BELIEVES HIS/HER DATA PROTECTION RIGHTS HAVE BEEN BREACHED:
Lodge a complaint with your national Data Protection Authority (DPA) (a governmental agency). The authority investigates and informs you of the progress or outcome of your complaint within 3 months.
Take legal action against the company or organization. File an action directly in court against a company/organization if the citizens believes that it has violated his/her data protection rights. This doesn’t stop the citizens from lodging a complaint with the national DPA.
Take legal action against the DPA. If the citizen believes that the DPA has not handled his/her complaint correctly or if they aren’t satisfied with its reply or if it doesn’t inform them with regard to the progress or outcome within 3 months from the day the complaint is lodged, the citizen can bring an action directly before a court against the DPA.