It sounds like a technical problem but it is a political one. You need an entity that is independent from the malicious actors wanting to use surveillance for control. Once you have that, giving that entity able to manage all aspects without bleeding private information is a technical problem, but if you don't have one to begin with, it is without hope.

If some people have the right to enter any building and any computer to sniff data without restriction, you can't have privacy. It is a political problem.