New York passes bill banning prices based on personal data