Data harvesting, leaks and other scandals raise questions about the safety of our activities online. Who should control personal data? How to protect privacy? And who should be setting the rules?