I think the sad fact, addressed in the article, is that the bill wasn’t going to pass without industry support. Oftentimes this means either a) limited recourse

I think the sad fact, addressed in the article, is that the bill wasn’t going to pass without industry support. Oftentimes this means either a) limited recourse for failing to comply, and/or b) new barriers to entry to smaller organizations. While this bill is meek, it does seem to be purely a net gain, since the burden on businesses is low and it gives consumers an easier recourse in cases of fraud (since the collected information will now available directly or by a subpoena).