US senator working on bill that would jail CEOs for user privacy violations