The proposed framework is the latest addition to a decade-long timeline of data protection in India