Rights advocates and civil society organizations have raised concerns about data breaches, saying the data protection legislation in the country is not enough.