FBI breach notice rules lauded by states, but some want more