There is no such protection in the US, and I'd imagine some other non-EU states.
I'd love something akin to a Bill of Data Rights here in the the states similar to the GDPR, but there is no way oligarchs would allow such legislation to happen
I think you might have misunderstood my meaning. I don't mean a right to use my own data. I mean a right to actually own that data in the sense that others cannot collect and sell it without my consent and proper compensation based on revenue generated by the collector.
But then we're talking about website tracking, things like that, not actual exfiltration of stored data?
This isn't data rights though, this is that the same law that prohibits people from hacking into your computer is applicable to people doing other things with it in unpermitted ways.
Basically, a program that exfiltrates data without permission is treated no different from a rootkit, legally.