Data localisation, parental verification in data protection rules weigh most on tech industry’s minds