Applicability

Notwithstanding any other law, KRS 304.3-750 to 304.3-768 establish the exclusive requirements applicable to licensees, except licensees exempt under KRS 304.3-752, under the laws of the Commonwealth of Kentucky for: (1) Data security; (2) The investigation of a cybersecurity event; and (3) Notification to the commissioner regarding the occurrence of a cybersecurity event.