In order to sue them you need to be able to prove actual damages. The best course of action is to report them to your local DPA, who will levy fines for breaches of data protection laws. Furthermore, if you do have damages, action by the DPA will increase the likelihood of winning your claim.

People responding saying they have to prove damages have no clue what they’re talking about. GDPR states, as you say, that they have responsibilities when it comes to your data and the obligation to delete upon request is one of them. At the minimum, for european users they are in violation of GDPR and are opening themselves to massive fines.

Some prior enforcement here, which includes Meta’s $400M fine: https://cms.law/en/int/publication/gdpr-enforcement-tracker-report

Posts and comments are the property of Reddit, not the user.

Perhaps you could actually specifically cite a law and the conduct which you believe violates it.