Businesses collect plenty of data, but they must have permission to use it, says Frank Jennings