What we pursue.

Leaked, stolen or exposed personal data — and the security failures that let it happen.

• Inadequate technical and organisational security measures
• Late or missing breach notifications to you or the authority
• Exposure of passwords, financial, health or identity data
• Non-material damage: loss of control, anxiety, risk of fraud

Data collected or used without a valid legal basis, beyond its purpose, or kept far too long.

• Processing without consent or another lawful basis
• Purpose creep and secondary use of your data
• Excessive retention and failure to delete
• Opaque or misleading privacy notices

Companies that stonewall, delay or deliver incomplete answers to your subject access request.

• No response within the one-month deadline
• Incomplete copies or redacted-without-reason disclosures
• Refusals based on improper grounds
• Failure to disclose recipients, sources or automated logic

Covert tracking, dark-pattern consent banners, unsolicited marketing and data brokering.

• Cookies and pixels set before or without valid consent
• Manipulative consent interfaces
• Spam, cold calls and marketing after objection
• Sale or sharing of your profile with third parties

Health, biometric, genetic, sexual orientation, political or religious data processed unlawfully.

• Facial recognition and fingerprint systems
• Health and medical data disclosures
• Inferences about protected characteristics
• Data relating to children

Personal data sent outside the EU without adequate safeguards against foreign access.

• Transfers without adequacy decision or valid safeguards
• Undisclosed sub-processors in third countries
• Exposure to foreign surveillance regimes
• Cloud and SaaS vendors with non-compliant transfer chains

Excessive workplace surveillance, covert monitoring and misuse of employee personnel data.

• Keystroke, screen and location tracking
• Covert video surveillance
• Disclosure of personnel files and health data
• Background checks beyond what the law allows

Algorithms that decide about you — credit, insurance, employment — without lawful basis or human review.

• Credit scoring and blacklisting
• Automated rejection of applications
• Opaque AI-driven profiling
• Refusal to explain the logic involved