Apps and websites that do not protect their users may be fined or blocked under new proposals.