If Congress doesn’t take the lead on protecting consumers from data breaches, states are more than ready to offer their own fixes.

Legislative sessions will kick off in dozens of states this month, and in many of them, lawmakers are expected to introduce bills that would mandate free credit freezes for consumers affected by data breaches and impose strict punishments on firms that are hacked and fail to notify consumers in a timely manner.

In the wake of the hack at Equifax that compromised the personal data of some 145 million Americans, the American Bankers Association estimates that legislation toughening laws around data breaches will be introduced in at least half of all states this year.

Banks, by and large, appreciate states’ efforts to strengthen data-breach laws, but with so many banks operating in multiple states, they would prefer for Congress to pass a federal law that would override the patchwork of state laws.

Read more in American Banker.