“The preemption clause in the SECURE Data Act could nullify state laws such as Texas's biometric privacy law and the Illinois Biometric Information Privacy Act (BIPA).”