Specifying and Assigning “Bundles of Rights” on Data: An Economic Perspective