> What the GDPR allows private individuals to do is to contact their regulators and to complain if you decide to ignore their requests.
The individual will not receive a payout from a GDPR violation.