(a) The purpose and intent of this Act is to establish standards for data security and standards for the investigation of and notification to the Director of a cybersecurity event applicable to licensees.
     (b) This Act shall not be construed to create or imply a private cause of action for a violation of its provisions nor shall it be construed to curtail a private cause of action which would otherwise exist in the absence of this Act.