The steps would include appointing a federally-approved privacy official at the highest level of Facebook and creating a privacy oversight committee that may include Facebook board members