[tzs]

Article 79 says that each data subject that considers that their rights under GDPR have been violated by a controller or processor has the right to an effective judicial remedy, which may be brought before a court in either the Member State where the data subject resides, or where the controller or processor has an establishment.

This is distinct from administrative and non-judicial remedies.

That sure sounds like suing.