Proposed bill would create a new federal agency to protect consumer data