Under GDPR (AVG), companies must protect your data. If they fail, you may be entitled to compensation for material and non-material damage.
01Material vs. Non-Material Damage
**Material:** You lost money due to fraud directly linked to the leak.
**Non-Material:** Emotional distress, fear of identity theft. This is harder to claim but possible in class actions.
02Class Actions (Massa Claims)
Several organizations (Consumentenbond, Stichting Data Bescherming) often start collective claims. Keep an eye on the news for these.