Self-regulation and privacy online a report to Congress