While the law seeks to put individuals in charge of their own data, repeated consent requests, impractical rules for families ...