Yes, but they sure are trying hard to make it impossible. “Huge privacy violations have become commonplace. Without a private right of action, consumers have little practical ability to seek relief in cases where their data was mishandled or misused. This eliminates a powerful enforcement stick that can be used to dissuade companies from violating the law.” – The New York Times