How digital identity could resolve the privacy paradox