. "These three bills would require businesses to develop data privacy and security plans, and it would set a federal standard for notifying individuals of breaches of very sensitive personally identifiable information, such as credit card information or medical records." . . . .