The state has expanded its current personal privacy law to include neural data increasingly coveted by tech companies.