US agency proposes new rule blocking data brokers from selling Americans’ sensitive personal data