Okla. Stat. tit. 36, § 36-671: Construction and application of act

A. Notwithstanding any other provision of law, the provisions

of this act shall be the exclusive state law for licensees subject

to the jurisdiction of the Insurance Commissioner for data security,

the investigation of a cybersecurity event, and notification to the

Commissioner.

B. This act shall not be construed to create or imply a private

cause of action for violations of its provisions.