The Consumer Privacy Protection Act would allow states to keep their own laws if they provide more stringent reporting and privacy protections than offered by the federal government. Business groups oppose the bill because it would not standardize the reporting of data breaches. Other bills introduced in the current Congress would usurp state laws with varying reporting and security requirements with a single federal law. “A federal standard cannot simply become a 48th standard that states can add their own requirements atop,” a TechAmerica executive vice president said earlier this year.”]
Source: https://www.cuinfosecurity.com/another-breach-notification-bill-introduced-a-8189