Data protection law: associations have license to sue

The Federal Court of Justice had wanted to see it differently, but now the judges in Luxembourg have clarified the matter: member states may grant qualified organizations such as consumer associations standing to sue in the enforcement of the General Data Protection Regulation. The ruling provides another building block in enforcement – and one industry, in particular. It is likely to feel the consequences soon.