The move's alarmed states, which have the constitutional authority to run elections and are protected from sharing individual data with the government.