> I can see this kind of legislation turning any online presence into a horribly expensive bureaucratic nightmare while accomplishing fuck-all security-wise.

One of the sources of a push for federal standards is frustration with multiple conflicting state standards doing the same thing.