Abstract: The new legislation referring to personal data gives to the data subject – the person whose data is processed by a controller – a position of control over the manner in which the personal information is used, this control being represented by a series of rights that the European legislation greatly emphasizes in the General Data Protection Regulation. In order to ensure the adherence to their rights, the data subject can address the issue in an administrative or civil litigation path. This paper outlines the main aspects of the judicial process of a dispute referring to personal data, underlining the roles of the involved parties.

Keywords: personal data protection, settling disputes, complaints referring to data protection, GDPR