Poor oversight of data mining used in counterterrorism initiatives could leave personal information vulnerable, finds GAO report.