The core to any solution to the data privacy problem will have to be a clear legal understanding that the individual owns any data about himself and can choose with whom to share it and under what terms and circumstances.
The technical and contractual details can follow on a nation-by-nation basis, but if that’s not the starting principle then the Facebooks and Experians and Grindrs and other sociopathic “slow AIs” of the world, along with authoritarian nation-states, are going to keep abusing and mishandling highly personal data.