In The national stage, GDPR establishes unbiased info protection authorities responsible for the enforcement in the GDPR. To this intent it provides them with harmonised and strengthened enforcement powers, ranging from warnings and reprimands to administrative fines. You've got the right to mandate an NGO to lodge a complaint on https://nathanlabsadvisory.com/iso-55001-2014-certification-it-asset-management/