In some branches of the civil service in the UK (I do not know exactly which ones but HMRC is one of them), we've had a system to deal with this for about 20 ye

In some branches of the civil service in the UK (I do not know exactly which ones but HMRC is one of them), we've had a system to deal with this for about 20 years now. All accesses of personal data have some random chance (I think it's 5%) of being audited. If your request gets picked, a dialog pops up saying that your access is being audited and you must file a form immediately, explaining why you needed to access that record. For celebrities and for anyone whose records have a history of abuse, the probability goes to 100%. If you do not submit the form, or your explanation is not satisfactory, you get invited to a disciplinary interview. That's cheaper than auditing all accesses, but is enough to discourage unnecessary "browsing" of data.