The legislation targets “external interference” and the theft of state secrets, with implications for businesses, journalists, civil servants and others.