Commissioner’s recommendations for tech companies include measures that have been criticised on privacy grounds.