The legislation would criminalize the tactic of releasing personally identifiable information with the intent to cause someone fear or harm — or encourage another person to do so.