After clear passage through the state Senate, it's up to members of the state House to decide whether the bill provides the right data-privacy protections to consumers.