To enact data privacy legislation in the United States, we have to unravel data ownership — we have to figure out who owns data. It might sound like a simple question, but it isn't; it's a question that has baffled the US Senate on more than one occasion.