The rise of private authorities, albeit in the a-territoriality space such as the Web, is representative of an economic and social phenomenon that cannot disregard the respect of legal rules, especially for the protection of the right to privacy, the right to data protection, and other fundamental rights. On the one hand, the GDPR has provided a new approach for the autonomy of individuals, especially for companies which perform data processing also for commercial purposes: the principle of accountability. Insofar that, data controllers should be responsible for, and be able to demonstrate compliance with the general principles relating to data processing. On the other hand, it is up to digital service provides the practical decision to decide which technologies could be adopted not only for operation which involve data processing but also for the concrete exercise of data subject’s rights, as it has been well remarked in the European Court of Justice decisions on the right to be forgotten.