Answer
Individuals can claim compensation if a company or an organisation infringed the General Data Protection Regulation (GDPR) and they have suffered material damages, such as financial loss or non-material damages, such as reputational loss or psychological distress. The GDPR ensures they will be provided with compensation, regardless of the number of organisations involved in the processing of their data. Compensation can be claimed directly from the organisation or before the competent national courts. Proceedings are brought before the courts of the EU Member State where the controller or processor has an establishment or where the citizen claiming compensation lives (habitual residence).