In-scope companies would only be permitted to demand 24 datapoints from business partners under European Commission's proposed voluntary standard