FTC urges a ‘rethink’ of data privacy at hearing