Making a case for a data privacy and protection law in India