If a formal legal-entity organization keeps your personal data, non-anonymized, then the those world states it operates in can be assumed to have access to the

If a formal legal-entity organization keeps your personal data, non-anonymized, then the those world states it operates in can be assumed to have access to the data. And then it is a question of what private corporations can get the state to provide them with - officially or unofficially.