Go at it with both prongs, so that the organizations have to comply. Think of it as what Ralph Nader did long ago with the auto industry. Some people called it public shaming.
If you don't know how an organization is complying, whether it's complying or to what extent it's complying, you're in the dark.