A judge has ruled that a lawsuit alleging Target’s illegal collection of biometric data can proceed, raising concerns about privacy and data security.