Notwithstanding any other provision of law, sections 60A.985 to 60A.9857 establish the exclusive state standards applicable to licensees for data security, the investigation of a cybersecurity event, and notification of a cybersecurity event.