Data Access Rights Exploits under New Privacy Laws