* Limit the damage that a person can do- IE; don’t aggregate everything in the hands of one person.
* Tonnes of oversight into who accesses the data and why.
In theory the US chooses the latter, but only for nationals and the snowden leaks were proving that this was basically just a rubber stamp and constantly was bypassed on technicalities..
.. outside of the US, there’s no legal framework to protect your data from US authorities, no matter who they are, at all.