GDPR & Data Protection Litigation · European Union

Your data. Your rights. Their liability.

We act exclusively for individuals whose personal data has been misused, exposed or exploited — and we hold the companies responsible to account, in full.

Report a violation What we pursue
Jurisdiction
EU-27
Legal basis
Art. 82 GDPR
We represent
Individuals only
Status
Accepting claims

Our position

We don’t negotiate with data abusers.
We litigate.

The GDPR gave every person in the European Union an enforceable right to compensation when their data is mishandled. Most companies are betting you will never use it.

Dobski & Associates exists to make that a losing bet. We are a specialist litigation practice that sits on one side of the table only: yours. We do not advise corporations. We do not defend controllers. We have no conflicts to manage.

What we pursue

Every violation leaves a trail.

We follow it — through the privacy policy, the server logs and the boardroom — until someone answers for it.

  1. Art. 32–34

    Data Breaches

    Leaked, stolen or exposed personal data — and the security failures that let it happen.
  2. Art. 5–6

    Unlawful Processing

    Data collected or used without a valid legal basis, beyond its purpose, or kept far too long.
  3. Art. 12–15

    Ignored Access Requests

    Companies that stonewall, delay or deliver incomplete answers to your subject access request.
  4. Art. 6, 7 · ePrivacy

    Tracking, Cookies & Marketing

    Covert tracking, dark-pattern consent banners, unsolicited marketing and data brokering.
  5. Art. 9

    Sensitive & Biometric Data

    Health, biometric, genetic, sexual orientation, political or religious data processed unlawfully.
  6. Art. 44–49

    Unlawful International Transfers

    Personal data sent outside the EU without adequate safeguards against foreign access.
  7. Art. 88 · § 26 BDSG

    Employee Monitoring

    Excessive workplace surveillance, covert monitoring and misuse of employee personnel data.
  8. Art. 22

    Automated Decisions & Profiling

    Algorithms that decide about you — credit, insurance, employment — without lawful basis or human review.

The record

Claims pursued against controllers
18+
EU member states covered
7
Recovered for individuals
€1.26M+
Years of data protection practice
8

Aggregate figures. Individual matters remain strictly confidential. Prior results do not guarantee a similar outcome.

How it works

From complaint
to consequence.

A disciplined, four-stage process. You stay informed at every step. They don’t get to set the pace.

  1. 01

    You report

    Tell us what happened through our confidential intake. Every report is reviewed by a lawyer.

  2. 02

    We investigate

    We assess the facts, issue access requests, and secure the evidence the company would rather you never saw.

  3. 03

    We demand

    A formal demand under Art. 82 GDPR lands on the controller’s desk. Deadlines are short. Excuses are not accepted.

  4. 04

    We litigate

    If they do not settle on terms that reflect the harm done, we take them to court — and we are prepared to go the distance.

Notice to data controllers

If you process personal data and you are reading this page, you already know why.

  • We read your privacy policy. Then we read your logs.
  • We know what a complete Art. 15 response looks like.
  • We know the case law of the CJEU on non-material damage.
  • We know which deadlines you have already missed.

Confidential intake

They took your data. Make them answer for it.

Tell us what happened. Every submission is reviewed in confidence by a qualified data protection lawyer.

Report a violation Know your rights