Citing a five-year CBS13 investigation, lawmakers passed a bill that will force the Employment Development Department to stop putting people at risk of identity theft by mailing full social security numbers, a practice that is already against the law.