Rushed data legislation would give UK worrying surveillance powers