The Sedona Conference Commentary on Quantifying Violations under U.S. Privacy Laws