States which have sued to enforce customer security legislation are