I think the medical industry can easily be regulated without the government having access to my actual medical file. They regulate cars without having any idea how I drive mine. They regulate planes without sitting on the flight deck themselves.
It's like we know how to build good businesses, good databases, have solid user control practices, but then we give the government a pass because it's imagined to be "really hard." It's laughable.