The draft bill has a number of issues, ranging from an insecure mechanism that leaves people’s data vulnerable to attacks, to a lack of mandatory disclosure of data breaches.