Congress is working on data privacy legislation known as the U.S. Data Privacy Protection Act, but critics claim it doesn't go far enough to protect people's privacy.