What Indians should know about the proposed data-protection law