1. Member States shall ensure that adequate and effective means exist to ensure compliance with this Directive.

2. The means referred to in paragraph 1 shall include provisions whereby one or more of the following bodies, as determined by national law, may take action under national law before the courts or before the competent administrative bodies to ensure that the national provisions transposing this Directive are applied:

(a) public bodies or their representatives;

(b) consumer organisations having a legitimate interest in protecting consumers;

(c) professional organisations having a legitimate interest in acting;

(d) not-for-profit bodies, organisations or associations, active in the field of the protection of data subjects' rights and freedoms as defined in Article 80 of Regulation (EU) 2016/679.