A European Union draft proposal has drawn criticism from privacy advocates, although it may not be the “back door” that some fear.