The city of Washington, D.C. is set to strengthen its data-breach laws following the passage this week of a bill that greatly expands the definition of personal identifying information that companies doing business in the District are required to protect.