Although the ability of non-profits to initiate class actions, allowed under Article 80 of the GDPR and which could lead to even greater costs on data miners, has been removed, it is possible that this may be re-inserted when European Parliament debates its amendments.