Concerns about the ethical use of data, privacy, and data harms are front of mind in many jurisdictions as regulators move to impose tighter controls on data privacy and protection, and the use of artificial intelligence (AI). Although efforts to hold corporations to account for their deployment of data and data-driven technologies have been largely welcomed by academics and civil society, there is a growing recognition of the limits to individual data rights, given the capacity of tech giants to link, surveil, target, and make inferences about groups. Questions about whether collective data rights exist, and how they can be recognized and protected, have provided fertile ground for researchers but have yet to penetrate the broader discourse on data rights and regulation.