China has approved a sweeping privacy law that will curb data collection by technology companies, but that policy analysts say is unlikely to limit the state’s widespread use of surveillance.