India passes data protection law amid surveillance concerns