Instead of a law focusing on protecting online rights, the PECA relied on criminalisation of free speech and wide powers of content regulation