Article 79
Right to an effective judicial remedy against a controller or processor
(55) Whereas, if the controller fails to respect the rights of data subjects, national legislation must provide for a judicial remedy; whereas any damage which a person may suffer as a result of unlawful processing must be compensated for by the controller, who may be exempted from liability if he proves that he is not responsible for the damage, in particular in cases where he establishes fault on the part of the data subject or in case of force majeure; whereas sanctions must be imposed on any person, whether governed by private of public law, who fails to comply with the national measures taken under this Directive;
Regulation
Art. 79 1. Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation. 2. Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers. |
Directive
Art. 22 Without prejudice to any administrative remedy for which provision may be made, inter alia before the supervisory authority referred to in Article 28, prior to referral to the judicial authority, Member States shall provide for the right of every person to a judicial remedy for any breach of the rights guaranteed him by the national law applicable to the processing in question. |
Bulgaria
Personal Data Protection Act Article 39. (Last Amendment - SG No. 81/2011) (1) (Last Amendment, SG No. 91/2006) In case his or her rights under this Act are infringed, each individual may appeal the actions and acts of the data controller before the relevant administrative court or the Supreme Administrative Court under the general rules of jurisdiction. (2) (Last Amendment, SG No. 103/2005) In the proceedings referred to in Para 1, the individual may claim compensation for damages suffered as a result of unlawful processing of personal data by the controller. […] (4) (Former Par. (3) - SG No. 81/2011) The individual may not bring the case before court if there are pending proceedings before the Commission for the same violation or its decision on the same violation is appealed and there is no final court decision. As per a request of the individual the Commission certifies the absence of pending proceedings before it on the same dispute. […] |