They say ‘if you are not paying for the product, then you are the product‘, but how far does this go? Can the laws allegedly protecting our data keep with the pace of technological development?