Societies need to implement rules so that any sharing of a user's data needs to flow through data repositories that are controlled by the user and so they can authorize and audit each of these flows. Sort of like an oAuth dialogue, "Mortage Lender A wants access to your 2020 after-tax income" and you'd give them limited access so they could underwrite the loan and it'd be illegal to store the user's data any longer than necessary for that purpose. This would give companies cleaner data and common API while eliminating the possibly for anti-consumer data middle men like credit bureaus who could be then be summarily launched into space.