Creating a charter of people's personal data rights.