Dr. T.J. McIntyre:

That is right. It is compensation on behalf of the data subject. It is not something that would be funnelled into the coffers of a particular group. Without the ability to seek compensation, we give individuals what is to my mind a very unfair choice. They have suffered loss as a result of, for example, a data breach. They can either seek a remedy through going through a non-profit group but give up the right to damages or they can seek damages but only if they have the knowledge and financial resources to bring the action and they must put themselves at risk of bearing the costs of the other side if they lose the action.