Prison time, hefty fines for data privacy violations: draft U.S. Senate bill