CFTC proposes easing privacy notice rule – three years after congressional action