Usable Sec: No rights to your data

If a company has collected an American user’s personal data without their consent, how can the user respond?
They can’t —  They have no rights to their data.