One Step Forward, Five Steps Back: An Analysis of the Draft Privacy Legislation