Congress has never passed a comprehensive data privacy bill in the digital era. Two lawmakers are trying to change that.