Will US reform help Americans ‘own’ their data — and help businesses protect and recover it?