U.S. lawmakers have attempted to pass breach notification bills for several years without success.

Several Democrats opposed the bill, saying it would preempt stronger state laws. More than 45 states now have data breach notification laws.

Bono Mack's bill also does not protect personal information such as over-the-counter drug purchases, e-mail addresses, payroll records, and online pictures and videos, Democrats argued.

The bill would require breach notifications only when a customer's name, phone number or credit card numbers were compromised along with a Social Security number, driver's license number, or other government ID, Democrats said. The bill would not require notification if a Social Security number, credit card number or bank account number was compromised, unless it were combined with other personal information, Waxman said.

The definition of personal information in the bill is "far too limited," said Representative G.K. Butterfield, a North Carolina Democrat.