U.S government, companies not doing enough to protect data privacy, says Microsoft