GDPR solves these problems. As a startup it was annoying implementing all the subprocessor paperwork, but as a consumer / citizen I want those rights. In your

GDPR solves these problems. As a startup it was annoying implementing all the subprocessor paperwork, but as a consumer / citizen I want those rights. In your case above, I’m not actually sure how data ownership works on sale of a company, but you can always have the company delete all your data if you don’t want it changing hands. In other words, you should always own your data, and companies should never be able to do something with it that you do t consent to.