The federal privacy commissioner is developing a set of “best practices” for companies and other organizations that want to collect online user data as it works to resolve issues with a number of “leaky” websites, the commissioner’s office said.