Congress considers a national standard for data privacy