Tougher rules sought on personal data use