Comment by Insimwytim

Wouldn't you have to "consent" first?

What if you didn't and did not proceed with the process? Can you complain still?

As in - if you didn't give your consent there's no violation has occurred and they don't have your data, so nothing to ask for?