Biological and neural data; certain disclosures, transfers, and use by a covered entity prohibited unless consumer provides express consent, Attorney General authorized to enforce, civil penalties provided