New rules on what companies can do with personal information include tighter consent requirements, a ‘right to be forgotten’, ...