[JerreBM]

They can report you to their local authorities and (potentially) sue you. Take a look at this: https://ec.europa.eu/info/law/law-topic/data-protection/refo...

[emiliobumachar]

Arguably it's an "undue burden" to send a form letter "designed to waste as much of their time as possible"

[vonmoltke]

The targets will still need to spend time (and thus, indirectly, money) to demonstrate that such a letter is such an "undue burden".

This assumes they can even do so; if there are national regulators who hold the same opinions that some HN posters do about Google and Facebook, there may be no definition of "undue burden" they are willing to accept.

[ericb]

What about if you're not in the EU?

[compuguy]

I'm honestly not sure. I doubt you could do this if you weren't a EU resident or citizen...