EFF's Recommendations for Consumer Data Privacy Laws