(146) A person should be entitled to compensation from the controller or processor for the damage he or she has suffered as a result of being processed in violation of this regulation. However, the administrator or processor should be exempted from legal liability if they prove that the damage was in no way their fault. The concept of damage should be interpreted broadly, in light of the case law of the Court of Justice, in a manner that fully reflects the objectives of this Regulation. This does not affect claims for damages arising from violations of other provisions of Union or Member State law. Processing carried out in violation of this Regulation shall also include processing that violates delegated and implementing acts adopted pursuant to this Regulation and Member State law further specifying this Regulation. Data subjects should be fully and effectively compensated for the damages suffered. If controllers or processors are involved in the same processing, each controller or processor should be legally liable for the entire damage. However, if they are involved in a single legal action in accordance with the law of the Member State, compensation may be imposed on each controller and processor according to their fault for the damage resulting from the processing, as long as full and effective compensation for the damage suffered is provided to the data subject. Any controller or processor that has paid full compensation may then pursue recourse claims against other controllers or processors involved in the same processing.

