Concerns remain about the Cyber Security Act