[indziektor]

Case in point, I was just recently getting nowhere on an obviously automated decision, so I sent an email quoting GDPR Article 15(1)(h) (instead of Article 14) and got it resolved amicably within an hour. Maybe just coincidence, but their follow-up was a complete 180. I suppose it could be abused to get around certain automatic safeguards, but I made it clear that my intentions where just to ensure that my data is correct and being processed fairly, as I was sure it wasn't the case.

But that requires that the company even cares about following the GDPR correctly, or perhaps even the Data Protection Authority of a given EU country. I know of one small but popular enough data broker that's been operating for years in the EU and flaunting the GDPR without any punishment so far. Not sure if this is the place to advertise it. But I suppose somebody whose GDPR rights were violated has to lodge a complaint first.