Foreign firms have criticised the legislation, saying it forces them to share sensitive data with the authorities and favours domestic technology firms