A proposed bill calls for executives to be jailed for not protecting consumers' data, or at least for lying about it.