The Data Democracy Tightrope: Balancing Control and Security in the age of PII