Cybersecurity bill could ‘sweep away’ internet users’ privacy, agency warns