privacy draft bill