Proposed U.S. legislation would create the Data Protection Agency, to “regulate high-risk data practices and the collection, processing, and sharing of personal data.”