draft data protection bill