An advocacy group dedicated to online privacy rights has described proposed data protection legislation for the country’s new postcodes as “toothless and useless”.