By replicating existing frameworks, the draft Personal Data Protection Act misses out on critical local nuances.