Companies should hire hackers to test firewall strength: Former privacy commissioner