Decentralization and self-sovereign identity are the only way to solve this, IMO. I'll sing the praises of Estonia on this one: their X-Road system for storing sensitive data is brilliant.

I'm working on a team writing an in-depth whitepaper on this topic right now, I'd love to link it. Perhaps when it's published.