Sec. 30. Notwithstanding any other provision of law, this chapter establishes the exclusive state standards applying to licensees for:
(1) data security;
(2) the investigation of a cybersecurity event; and
(3) notification to the insurance commissioner concerning a cybersecurity event.