They can sue the data controllers to be awarded compensation. Article 82(1) GDPR: >Any person who has suffered material or non-material damage as a result of

They can sue the data controllers to be awarded compensation. Article 82(1) GDPR: >Any person who has suffered material or non-material damage as a result of an infringement of this Regulation shall have the right to receive compensation from the controller or processor for the damage suffered.