New privacy bill sets out rules on personal data, artificial intelligence