The General Data Protection Regulation (“GDPR”) brought about significant changes to the ways in which individuals can pursue civil claims for breach of their data protection rights.