FTC Seeks to Hold Companies to GDPR Promises