The bill's overly prescriptive language on the security controls that companies need to protect sensitive data is also likely to result in pushback from industry, he said. "I think we have started to already see in the health-care bill a lot of pushback," over similar legislation, and the same thing is likely to happen with this legislation he said. Such concerns could once again derail this bil, he said.
"Congress should really just focus on a national disclosure law that states cannot preempt - that would bring value to both the people whose identities are being stolen and the businesses which need to be driven harder to protect it," he said.