Prohibiting the state from sharing data with the federal government that contains personally identifiable information if the data is not first masked or otherwise anonymized and authorizing a civil cause of action for negligent violations of that prohibition. (FE)