Changes to privacy law would cover the cloud