Data rights and wrongs