NSA broke privacy rules 'thousands of times each year,' report says