The decision of the CJEU on potential damages deriving from a data breach might potentially increase the risk of a class action connected to privacy related violations.