The bill avoids market regulation while trying to rebuild federal coordination for hacks, tracing, and victims.