Reforming the U.S. Approach to Data Protection and Privacy