Zuckerberg could be held personally accountable for Facebook data breaches