US weighs email and cloud privacy law