Comment by yogurtboy

Does anybody with knowledge of the process know if this can be a path to holding companies liable for the private data they save?