Under Texas law, the lawsuit says, companies must obtain ‘informed consent’ from people to use their biometric data