Hello, my name is Ben and it is my pleasure to be able to assist with your question today.
If a party has acted in contravention of the Data Protection Act 1998 (DPA), then anyone who has suffered damage or distress as a result can potentially make a claim.
The first step is to report the alleged contravention to the Information Commissioner’s Office. They are the regulatory body that deals with breaches of data protection regulations and can investigate and fine the infringing party. However they will not award compensation to the victim so the only way to try and get any compensation is by going through court.
If the victim has only suffered distress and no financial damages, compensation is not available unless the breach related to the “special purposes” which means processing for artistic, literary or journalistic purposes. Any other breaches will not qualify.
If there have been financial losses as a result of the breach, then the case could be taken to court. I would not recommend that this is done straight away and suggest trying to reach some kind of compromise with the violating party. However, if that is not possible and court appears to be the only recourse then this leaflet contains useful information on how take a claim for data protection breaches to court:
I would be grateful if you could please take a second to leave a positive rating - your question will not close and I can continue providing further advice if necessary. Thank you