This could be compared better to the California disclosure law that was passed a couple years ago, requiring agencies or companies with breaches to disclose that to those who may have been affected.
If this holds up and looks good, other states will likely adopt (as they did the disclosure law). If enough states adopt, then the Feds will likely pass an all-encoumpassing version.
Not all California laws are embraced by the other states. But some are.
