The prerequisite for receiving compensation is that there is liability to compensate. The liability to compensate may be based on negligence or strict liability. Negligence means that the authority has been negligent or made a mistake in a reprehensible manner and caused harm. Strict liability means a liability to compensate that is independent of negligence, in which event the only prerequisite is that the authority has acted in a manner that has caused damage. The prerequisite for strict liability is that it has been specifically decreed for some action or that it has been approved in legal practice. For example, the responsibility a controller has for personal data, or environmental damage in general, are types of damage based on strict liability.