How do you obtain evidence for GDPR violations?
<p>What happens when say company EvilkorP sends untrue information and/or information that it is not entitled to share to company Y, and EvilkorP asks company Y to mention some fact about the victim (you) that is only known by EvilkorP?</p>

<p>What do investigators do?</p>

<p>You can submit <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/" rel="nofollow noreferrer">GDPR requests</a> to both companies asking them what information they have about you and who they have disclosed it to. They are legally required to provide this information apart from <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/exemptions/" rel="nofollow noreferrer">certain exemptions</a>. If they fail to do so then they are in breach of the GDPR.</p>

gdpr european-union investigation