Companies collecting California residents’ information could face tighter breach disclosure rules under a new proposal that would expand the definition of personally identifiable data in the state.

California Attorney General Xavier Becerra announced proposed legislation Thursday that would increase California’s data breach notification law. If AB 1130 passes, California’s definition of personally identifiable data would grow to include government-issued passports and green card numbers and biometric information, including fingerprints and retina scans.