It's been more than five years since California passed its pioneering SB-1386, which requires companies that lose personal information of customers to notify them, took...