There is huge pressure from industry to get Congress to preempt state data breach notice laws. It's quite a mess now.