Andrew Yang's "Data Dividend" and the EU's GDPR are not enough to put users back in control of their data.