New US House privacy bills raise hard questions about enterprise data collection