Proposed law aims to determine identities of those who arrive without documents, but privacy advocates say it goes too far