The proposed rule would bar financial firms from “hoarding” a consumer’s data.