Penalties and fines that can be levied by the supervisory authority against data controllers or processors and the right of data subjects to seek judicial remedies for the misuse of their data.