|
|
|
|
|
|
by Obi_Juan_Kenobi
2967 days ago
|
|
|
Can someone clarify what exactly is the legal liability that comes from GDPR? My very basic understanding is that countries set up SAs (supervisory authorities) to deal with complaints, and have the legal power to sanction and so forth. So is it only the SA that can take action against you? If someone wanted to harass you, must they complain through the SA, or can they bring a civil suit based on the GDPR? |
|
|
Yes.
> If someone wanted to harass you, must they complain through the SA, ...
Yes. There are also provisions for handling malicious requests to access personal data:
https://ico.org.uk/for-organisations/guide-to-the-general-da...
> ... or can they bring a civil suit based on the GDPR?
Nope.