In May, once GDPR becomes mandatory, we'll all be able to issue data requests to the likes of Facebook and Cambridge Analyitica etc, to find out just what they know about us. The requests are free, so with social media, you could almost mount a denial of service attack against a business if enough people make a request!