The General Data Protection Regulation 2016/679 (GDPR) provides means to enforce provisions related to personal data processing by you as a data controller or data processor. It introduces collective actions everywhere in European Member States; which can be brought by not-for-profit bodies dedicated to personal data protection.