Businesses urged to prepare for stronger data protection laws