This chapter does not create or imply a private cause of action for violation of its provisions and does not curtail a private cause of action that would otherwise exist in the absence of this chapter. Notwithstanding any other provision of law, this chapter establishes the exclusive standards, for this state, applicable to licensees for data security, the investigation of a cybersecurity event, and notification to the director.