[icebraining]

Which authority specifically? My experience is with two Portuguese regulators (one of Data Protection, other of Telecommunications). The first was pretty good, the second required a bit of insistence to prevent them from closing the matter after the company sent a reply that said nothing, but both worked out with nothing more than a few emails.

[tgragnato]

With the Italian Data Protection authority. http://gpdp.it

I wanted to know if emails are enough, but you already answered that. I'll need to test how numerically "a few" is.

My fear is that the process will take too much effort, it would be useless if rules were not enforced.