(a) Private cause of action.--Nothing in this chapter shall be construed to:
(1) Create or imply a private cause of action for a violation of this chapter.
(2) Curtail a private cause of action that otherwise exists in the absence of this chapter.
(b) Exclusive standards.--Notwithstanding any other provision of law, this chapter shall establish the exclusive State standards applicable to licensees for data security, the licensees' investigation of a cybersecurity event and notification to the commissioner.