There are others who have commented on data protection, and I would defer to some of them.
The one thing I would add on the conversation that occurred in the previous session is that my sense is that the concern is not just the voter lists per se but all the data that parties accumulate about citizens linked to that voters list. It's this complete set of data that people may legitimately worry about, as these could be used in ways that are either manipulative or exposed to being lost through cybersecurity incidents or inappropriate transmissions, sales and so forth.
I think the essence is to ensure that citizens' data is being protected as a statutory right, that there's some oversight, and that it's not entirely up to the discretion of the parties.