NSA breaks privacy rules