The law would prohibit the sharing of sensitive information without an individual’s consent, including biometric and health data.