Pennsylvania bill requires state agencies to notify individuals of breaches within seven days