Worried your address, birth date or health data is being sold? You should be – and the law isn’t protecting youundefined