This page [1] suggests that "non-material damages (for example distress)" are sufficient to "claim compensation from the website [...] as they have breached the

This page [1] suggests that "non-material damages (for example distress)" are sufficient to "claim compensation from the website [...] as they have breached the data protection law by not providing adequate security". I've gotten spam calls since the breach, sometimes in the middle of the night while trying to sleep. That's distress. [1] https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens/redress/can-i-claim-compensation_en https://ec.europa.eu/info/law/law-topic/data-protection/refo...