The initiative wants to set clear boundaries for the personal data accessed by third parties.