Eight states would likely see their identity theft reforms undermined by the measure, including California, which last month approved a groundbreaking credit privacy law which allows consumers to control whether banks, credit card agencies others can share their credit histories and personal information with affiliates and other companies.