The bill draws criticism due to its potential surveillance implications, as it allows cross-border user data transfers for companies and grants the government content control.