Government plans to have the all-powerful data protection board in place before industry provisions kick in