Policies target unauthorized collection, misuse of sensitive cognitive information from wearables, psychological tests