Another approach is the one implemented in Estonia. A citizen there has the ability to query who has accessed their records [1]. Combined with proper laws, this feature lead to "some very public cases of government officials being caught accessing private data of Citizens - without any legitimate and authorized reason for such access."
Note that through this mechanism, the society is still a control society [2], even though citizen themselves have more to say in that control.
I'm a dual Estonian-Canadian citizen and after getting my Estonian national ID card last year I just bought a card reader to log into the digital services.
I'm absolutely blown away by how clear and functional these services are and how seamless and user friendly the whole thing is.
I just signed up for blood transfusions should I ever need them in Estonia and that process involved using my smart card to sign the consent agreement and can see which department and when accessed this information.
Meanwhile the province I'm from is still handing out paper healthcare cards in 2024.
Note that through this mechanism, the society is still a control society [2], even though citizen themselves have more to say in that control.
[1]: https://doi.org/10.1007/s12553-017-0195-1
[2]: https://en.wikipedia.org/wiki/Gilles_Deleuze#Values