highlights of data protection bill