With new privacy law, China could reshape cross-border data