A bill in Tennessee would make it harder for people to sue the companies that fail to protect their private information.