The legislation will prohibit credit companies from consumer’s data to third-party lenders in what advocates say is a win for consumer privacy.