Though many states have adopted data breach notification laws, notification is a far cry from prevention.