New state privacy laws don't do enough to protect personal information used by financial businesses, a federal regulator says. Eighteen states, including California and Texas, passed privacy laws ...