A privacy bill being considered in New York State would go even further than the California Consumer Protection Act. For one thing, it would establish a private right of action. For another, it would require rims to act as “data fiduciaries,” barring them from using data in a way that drives profits yet harms consumers. The tech industry opposes the bill.