The 21 publisher association seeks safeguards for journalism, warning consent and data erasure rules could hamper investigations and expose sources