It proposes data protection legislation that allows the transfer and storage of personal data in some countries while raising the penalty for violations.