Consumer privacy bill of rights