Notwithstanding any other law, KRS 304.3-750 to 304.3-768 establish the exclusive requirements applicable to licensees, except licensees exempt under KRS 304.3-752, under the laws of the Commonwealth of Kentucky for:
(1) Data security;
(2) The investigation of a cybersecurity event; and (3) Notification to the commissioner regarding the occurrence of a cybersecurity event.