The European Commission has published some new FAQs on reforms to European data protection rules. They include examples. Some that I think are worth reading: - [What is personal data?](https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-personal...) - [Can I claim compensation [if an organisation hasn't respected the GDPR]?](https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citize...) - [What information should I receive when I provide my personal data?](https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citize...) I want to extract a quote from another of the FAQs, "[What should I do if I think that my personal data protection rights haven’t been respected?](https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citize...)" The third bullet points is very interesting. Sounds like the DPAs will need to be ready to take action very swiftly once enforcement of the GDPR begins, protecting the rights of data subjects. "If you think your data protection rights have been breached, you have three options: - lodge a complaint with your national Data Protection Authority (DPA) The authority investigates and informs you of the progress or outcome of your complaint within 3 months; - take legal action against the company or organisation File an action directly in court against a company/organisation if you believe that it has violated your data protection rights. This doesn’t stop you lodging a complaint with the national DPA if you so wish; - take legal action against the DPA If you believe that the DPA has not handled your complaint correctly or if you aren’t satisfied with its reply or if it doesn’t inform you with regard to the progress or outcome within 3 months from the day you lodged your complaint, you can bring an action directly before a court against the DPA. Best wishes, Ayden