In two decisions rendered this month, the UK courts have permitted two major class-action lawsuits under the General Data Protection Regulation (GDPR) regime. The suits prove that the GDPR opens the door for large representative suits on behalf of data breach victims..