Dixon describes GDPR as a “game-changer” in how organisations and individuals will treat and value data. While companies have been warned about punitive fines, one aspect that is rarely mentioned is the potential for civil action by individuals that will come in the wake of GDPR.