> So is it only the SA that can take action against you? Yes. > If someone wanted to harass you, must they complain through the SA, ... Yes. There are also p

> So is it only the SA that can take action against you? Yes. > If someone wanted to harass you, must they complain through the SA, ... Yes. There are also provisions for handling malicious requests to access personal data: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/ https://ico.org.uk/for-organisations/guide-to-the-general-da... > ... or can they bring a civil suit based on the GDPR? Nope.