For The national level, GDPR establishes independent data security authorities answerable for the enforcement in the GDPR. To this intent it provides them with harmonised and strengthened enforcement powers, ranging from warnings and reprimands to administrative fines. You might have the ideal to mandate an NGO to lodge a criticism https://nathanlabsadvisory.com/nist-800-cyber-security-frame-work/