New report: NSA broke privacy rules thousands of times