Citizens will now be able to set time limits on the consent they give for access to their data requested by private entities.