Mechanism of Collective Compensation for Damages Arising from Breach of Security Rules of the EU General Data Protection Regulation and its Application Feasibility in Iranian Law

Collective compensation for violations of private data protection security which is the subject of the EU's 2016 General Data Protection Regulation is a new mechanism that has been on the Union's agenda since 2018. The present research aims to explain the conditions, implementation mechanism and rules governing the mechanism through documentary method. The purpose of this mechanism is to aggregate lawsuits for breach of the aforementioned bylaws in a court of law to recover damage from the performance of controllers or processors of information collected by virtual reality institutions, NGOs rtaking measures to receive license. They will be allowed to sue for their rights. In accordance with Article 80 of the foregoing Regulations, these institutions are legal representatives of the people and do not need to be represented by them. In accordance with 2018 Consumer Protection Directive, governments are also responsible for compensation. Implementation of this process in Iranian law will be subject to legislative and administrative policies to monitor the performance of these organizations, ratify union regulations, and amend domestic law.