Prompted by last year’s Marriott International data breach, which saw more than 25 million unencrypted passport numbers leaked among other sensitive info, the state of California may soon require companies to notify customers when passport information and biometric data are accessed by anyone without authorization.