Senate moves toward new data security rules