Re:Ask HN: How do you GDPR for your small side projects?
by spiralx on Wednesday May 02, 2018 @06:47AM
(#16975699)
> So is it only the SA that can take action against you?
Yes.
> If someone wanted to harass you, must they complain through the SA, ...
Yes. There are also provisions for handling malicious requests to access personal data:
https://ico.org.uk/for-organisations/guide-to-the-general-da...
> ... or can they bring a civil suit based on the GDPR?
Nope.
My very basic understanding is that countries set up SAs (supervisory authorities) to deal with complaints, and have the legal power to sanction and so forth.
So is it only the SA that can take action against you? If someone wanted to harass you, must they complain through the SA, or can they bring a civil suit based on the GDPR?