Small claims court litigation (if the courts ever reopen and clear the backlog of bankruptcies) will get some attention.

There's no record of the claim ever being submitted because they don't send any confirmation. They just ignore it.

If you're going to submit these forms, take screenshots as evidence.

Are you suggesting to sue them on the basis of the GDPR? As far as I know that regulation doesn’t have give data subjects the rights to sue, and even then, proving monetary damages will be difficult.

I asked for info under GDPR and sent them a heavily redacted copy of my ID (redacted: surname, half my ID, address) and actually got an answer 3 weeks later that they have nothing on me. Citing their email:

"Hello, You are receiving this email as a response to your request for data access. After running the photo provided through our algorithm, no matches were found."

Next step: Opt-out. Step after that: Rinse, repeat.

Ditto.

Was it a CCPA request or GDPR?