GDPR represents an opportunity for brands to own the conversation around data rights, argue Rosamund Picton and Kourosh Newman-Zand.