NSA broke privacy rules thousands of times per year, audit finds