Chapter 8 of the Data Protection Regulation deals with the rights of data subjects and the liability and administrative fines of the controller and the processor of personal data.
Remedies, liability and penalties