Obama said that every state currently has its own policy on when companies must notify consumers of a breach and that there should be a single standard across the country and baseline protections across industries. The legislation would also make it a crime to sell customers' identities overseas.