The only thing that could be called a "threat" that I saw (and I may have missed some instances) was: > I would like you to be aware at the outset, that I anti

The only thing that could be called a "threat" that I saw (and I may have missed some instances) was: > I would like you to be aware at the outset, that I anticipate reply to my request within one month as required under Article 12, failing which I will be forwarding my inquiry with a letter of complaint to the <appropriate data protection authority>. and I don't really see that as a threat, more of a "directing of the proceedings". I mean, it's fact. If some company doesn't respond in the way I think they should to then that's exactly what I will be doing. This isn't a love letter, I don't see any harm in stating fact about this. I can totally see how it could be taken either way though. I also agree the letter is going after everything, and everything is going to be painful for companies, but for me personally the pain is going to be a byproduct of wanting to know everything. To be clear, companies that have made efforts to comply with GDPR that I've directly engaged with I'm not interested in and am going to leave alone, but the next unsolicited email from a recruiter I get will start a cascade of access then deletion requests up to the point where my information entered the system, painful or not.