Step 1: Make a bunch of companies collect sensitive data about their customers.

Step 2: Steal the data.

Result: you get the data you'd get from centralized surveillance from a population that would actively resist it.