(a) Private cause of action.— Nothing in this chapter shall be construed to:
- (1) Create or imply a private cause of action for a violation of this chapter.
- (2) Curtail a private cause of action that otherwise exists in the absence of this chapter.
- (b) Exclusive standards.— Notwithstanding any other provision of law, this chapter shall establish the exclusive State standards applicable to licensees for data security, the licensees' investigation of a cybersecurity event and notification to the commissioner.