“Eric Null predicts that the SECURE Data Act's broad preemption clause would nullify stronger state-level civil rights and privacy laws if passed.”