Bill passed in 2nd, 3rd readings at plenum; critics have voiced privacy concerns over legislation