A New Year and a New Approach to State Data Breach Legislation