IMO there’s two solutions, both can be done at the same time:
- Technological solution. Implement end to end encryption, and encrypt data at rest. Use techniques to prevent third parties from gaining access to decryption keys.
- Human solution. Strengthen, and critically, enforce laws that protect the privacy of individuals. Severely punish and hold to account misuse of data & PII.
It’s not dumb luck that the first and second amendments of the US constitution both provide protections against an unjust government. I’m not a gun fan by any means, I just see the similarity between the soft and hard approaches to addressing an issue.