A new Republican privacy bill could be ‘worse than no standard at all’