Beijing has implemented new rules to review overseas listings by firms that hold personal data of more than 1 million Chinese people