Draft legislation suggests tech groups should share what information they use to target citizens online