zlacker

This is no hysteria. Depending on where your company is located the sueing risk is really high. E.g. in countries like Germany there is a whole industry which lives from sueing companies and people and I can imagine that GDPR will open a whole new sueing market there. In other countries like Austria you get first warned and then sued on big GDPR violations which is a much better solution.

So it all depends.

>>therea+(OP)
As per the article, GDPR does not enable you to sue the company.

> What the GDPR allows private individuals to do is to contact their regulators and to complain if you decide to ignore their requests.

The individual will not receive a payout from a GDPR violation.

>>therea+(OP)
From a German perspective not much has changed: The core concepts "as minimal data collection as possible" & opt-in for more, the right to ask which data a company has about you and the right to make them delete it are established law in Germany since at least 2009 if not 1983.

>>weavie+W
Not as per the law. The law explicitly states that option for judicial remedy exists. The article is the opinion of a lawyer based on current practice, but this is not what the law actually says.