Data protection law and policy are founded on the approach of individual notice and consent — an approach with shortcomings in an age of big data and AI. This special reports considers the need for collective data rights by examining legal remedies currently available in the United Kingdom in three scenarios where the people affected by algorithmic decision making are not data subjects and so do not have individual data protection rights.