CFPB finalizes personal financial data rights rule