Data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), all presume that the individual “owns” her or his individual personally identifiable information (PII). However, the law of data ownership is far from settled....