Companies should not share or sell users' sensitive information—such as geolocation or health data—without "affirmatively" receiving permission from users to do so, Federal Trade Commission Chair Lina Khan said Friday.