A new bill aims to restrict how companies use personal info in education technology.