(a) Private cause of action.--Nothing in this chapter shall be construed to: (1) Create or imply a private cause of action for a violation of this chapter. (2) Curtail a private cause of action that otherwise exists in the absence of this chapter. (b) Exclusive standards.--Notwithstanding any other provision of law, this chapter shall establish the exclusive State standards applicable to licensees for data security, the licensees' investigation of a cybersecurity event and notification to the commissioner.
Pennsylvania Legal Code