SECURE Data Act offers ‘clear, enforceable’ privacy rules, but less big money lawsuits