Messaging services face stricter rules on how they handle customer data under new EU security laws due to be proposed.