But the requirement to submit years of personal data — including five years of social media history — could raise concerns ...