This bill would have required any business or agency to pay for credit monitoring services for 3 years following a security breach.
The bill was passed with amendments, and in its current version will only apply to government agencies.
Read HCUL's testimony here.