That doesn't really say that you have any specific action just from having your rights breached. It's not like in the US where you can sue for hurt feelings and get punitive damages - you have to have actual, costed damages to claim for.
The trouble with actual damages is that it's near impossible to prove that the breach of your rights directly caused the damages, if you can even put a monetary value to it. The potential for it to happen is not enough for a claim to succeed. So, in practice, in almost every circumstance the only avenue is a report to the DPA and hope they levy a fine.