In what ways can the draft data protection rules balance the need for digital innovation with the protection of citizens’ privacy?

With thousands of comments on the draft data protection rules, I am curious about the challenges in making laws that both encourage technological growth and safeguard personal data.