(a) AS 21.23.240 — 21.23.399 establish the exclusive state standard for data security for licensees and govern the investigation and notification of a cybersecurity event.
(b) AS 21.23.240 — 21.23.399 may not be construed to (1) create or imply a private cause of action for violation of AS 21.23.240 — 21.23.399; or
(2) prevent a private cause of action that would otherwise exist in the absence of AS 21.23.240 — 21.23.399.