i might unknowingly sign a lengthy form that allows my data to be sent to third party companies
This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.