Data protection laws in various countries provide various escalation mechanisms for such cases, including the possibility of filing a complaint against the organization and copying it with a government regulatory agency or taking the organization to court.