A rewrite of Europe’s privacy rules could turn every click, call, and login into a year-long entry in a government ledger.