One obvious way to handle this on private folders is client side encryption. Companies need to be protected, and users need privacy. This seems win-win. If an agency need to look in private folder, they must go through user - and that would at least have legal recourse.