SEC should protect investors through Cyber Security and Data Protection Bill