SUMMARY - Privacy Legislation and Enforcement
A citizen in Germany exercises her right under the General Data Protection Regulation to request all data a company holds about her, receives a response months later containing a fraction of what she knows the company possesses, files a complaint with her data protection authority, and waits years for resolution while the company continues collecting data about her daily activities, the law's promise of control over personal information mocking the reality of her powerlessness.