You don't need to sue in court, you can make a complaint to a covering Data Protection Agency. i.e. where the corporation's office is. They are supposed to take care of it, and they will have the power to force the local company to do things (or fine them).