In reforming data regulator, UK eyes innovation over privacy