The introduction of the EUs General Data Protection Regulation (GDPR) has given a new avenue to ambulance-chasing claimant law firms looking to make money from data breaches. With the end of Payment Protection Insurance (PPI) claims imminent, provisions in the GDPR around compensation, combined with the ICO handing out large fines to the likes of BA and Marriott, could create a new wave of no win, no fee compensation claims and class-actions.”]