New consumer protection rules on data come into force next year. While some are preparing for the implications, it seems too many still have their heads