Proposed online privacy rules are a ‘missed opportunity’