What should I do when I have received information about a breach of my personal data?

ANSWER

From the perspective of a data subject, when a breach of their personal data has occurred, they should consider opening an account in a credit and economic information system to monitor their credit activity in order to protect themselves against potential unlawful use of their personal data (there are systems, institutions, and businesses on the market that offer services enabling monitoring of one's credit activity). If any irregularities are identified, they should report the matter to law enforcement authorities.

As regards the right to obtain compensation from the controller, under Article 82(1) GDPR, any person who has suffered material or non-material damage as a result of a breach of the Regulation has the right to receive compensation from the controller or processor for the damage suffered.

Irrespective of the above, the controller bears civil liability for a breach of personal data protection and related personality rights, so a person harmed by such a breach may pursue civil proceedings claiming compensation for property damage and, for non-pecuniary harm suffered in connection with the breach, compensation for pain and suffering (non-material damage).