Purpose and Intent

(a) Notwithstanding any other provision of law, this chapter establishes the exclusive state standards applicable to licensees for data security, the investigation of a cybersecurity event as defined in Section 27-62-3, and notification to the Commissioner of Insurance of a cybersecurity event as provided by this chapter. (b) This chapter may not be construed to create or imply a private cause of action for a violation of this chapter nor may it be construed to curtail a private cause of action which would otherwise exist in the absence of this chapter. (Act 2019-98, §2.)