How do we discriminate on what use cases are acceptable or not? How do we prevent arbitrary sites from abroad soaking up gobs of very exact detailed government

How do we discriminate on what use cases are acceptable or not? How do we prevent arbitrary sites from abroad soaking up gobs of very exact detailed government signed data? I don't see the active question as: are there valid uses? Maybe. Perhaps. But how can we create a tech so overpoweringly capable of destroying privacy at such a large scale responsibly, in a way that doesn't have horrific side effects?