> This is what I was going to say. As an American, I have no recourse in these situations. Europeans are fortunate to have governing bodies with at least some teeth. Not sure how that applies to UK citizens post-Brexit, though.

GDPR applies to all individuals in the EU, not just citizens.