It's Round 2 in Congress' bid to craft federal law that would require businesses to notify U.S. consumers about computer data-security breaches. Legislation introduced in February soon could become law, given the cooperative tone of federal lawmakers, says Ari Schwartz, a privacy advocate and deputy director of the Center for Democracy & Technology.