Consumer protection associations may bring representative actions against
infringements of personal data protection. Such an action may be brought independently of the specific infringement of a data subject’s right
to the protection of his or her personal data and in the absence of a mandate to that effect.

Source