You only give it to the government entities your country is asking you to. Heck, you could even encrypt each user's data with their own government's key. Edit:

You only give it to the government entities your country is asking you to. Heck, you could even encrypt each user's data with their own government's key. Edit: and key rotation is also a thing.