I. This chapter establishes the exclusive state standards applicable to licensees for data security, the investigation of a cybersecurity event, as defined in RSA 420-P:3, IV, and notification to the commissioner.
II. This chapter shall not be construed to create or imply a private cause of action for violation of its provisions nor shall it be construed to curtail a private cause of action which would otherwise exist in the absence of this chapter.