California, which has the most stringent consumer and data privacy laws in the country, has moved a step closer to forcing retailers — rather than financial institutions — to notify consumers when theyve suffered a data breach.