KRS 304.3-754: Applicability.

Notwithstanding any other law, KRS 304.3 -750 to 304.3 -768 establish the exclusive

requirements applicable to licensees, except licensees exempt under KRS 304.3 -752,

under the laws of the Commonwealth of Kentucky for:

(1) Data security;

(2) The investigation of a cybersecurity event; and

(3) Notification to the commissioner regarding the occurrence of a cybersecurity event.