With every click, like and share, "you are waiving all your rights," according to legal analyst John Elmore.

Your personal information is no longer yours. It's being collected and sold to data mining firms all over the world.

"All of this happens through our consent because we click on these terms of service that no one reads but everyone agrees to. And I think what all this is about perhaps is a change that just because I click a button that I agree shouldn't mean you forfeit all your rights online," said Mark Bartholomew, a UB law professor.

On Tuesday, Facebook CEO Mark Zuckerberg testified before Congress after selling millions of users' personal information to a company hired by the Trump presidential campaign. Zuckerberg said the company didn’t take a broad enough view of its responsibility, and that was a mistake. The company says it has instituted new privacy policies and notified users whose information was sold. 

"All in all, I'm positive with these initial statements by Zuckerberg. I just think more has to be done. And we can't just look to him for answers. We have to look to lawmakers to change some of the rules. It's kind of like the fox guarding the hen house. You need real rules and make sure social media companies comply with those rules," said Bartholomew.

Local lawyers say U.S. lawmakers should look to Europe, where new privacy rules go into effect next month. They require companies to use plain language when telling people how their information is used, plus allowing users to erase their data. But until then, lawyers say you need to control your own data as much as possible.

"When you take a quiz or personality test, that information is being shared, and it's being sold. Check your privacy settings. Be careful about what apps you use. Every time you like something or every time you like something several times, that information is being sold and mined, and sometimes it seems to me like they know more about you than your mother does," said Elmore.