The draft law is an extension of legislation passed in November formalising a range of controls over companies that handle data. Photo: Bloomberg