A bill would impose strict requirements on companies that collect biometric information, like facial scans and voiceprints, from their customers.