The solution to data tracking is more data tracking? This would work if everything would be done in bulk and by officials. It wouldn't work if it was just some

The solution to data tracking is more data tracking? This would work if everything would be done in bulk and by officials. It wouldn't work if it was just something citizens would have a right to know but would have to do all the legwork in order to uncover (sending out dozens of requests) and then would have to sue entities in court. It seems simpler to regulate PII based on consent and strict need-to-know principles.