Another approach is the one implemented in Estonia. A citizen there has the ability to query who has accessed their records [1]. Combined with proper laws, this feature lead to "some very public cases of government officials being caught accessing private data of Citizens - without any legitimate and authorized reason for such access."
Note that through this mechanism, the society is still a control society [2], even though citizen themselves have more to say in that control.