I think that would be a very large and difficult exercise, mostly because most small businesses do not carry that much private information. Groups like ours do a lot of work to try to inform our members. What they need are tools. They do not have the time. When you have three employees and you're the owner, to go out and get certified for two or three hours takes away from what you're trying to accomplish that day, and if you're not dealing with lots of information, I don't see that as being a really useful way of helping businesses get in compliance.
It might be a different story if you were a company that dealt with huge amounts of personal and sensitive information, but I think for the vast majority of small businesses out there, it would be seen as another paperwork burden exercise of government and it wouldn't accomplish what it set out to do, in the way it should.