I'm not familiar with the contents of the bill, but what I can tell you from the blockchain perspective is that it's all about the best practices you are using. You would never put PII, personal identifiable information, on a blockchain. You use it only for cryptographical proofs about that data.
In principle, if you use it correctly, there should not be any problem with respect to privacy.