Tenn. Code Ann. § 56-2-1002: Purpose and intent

(a) This part establishes the exclusive standards for data security, licensees' investigations of cybersecurity events, and licensees' notification of cybersecurity events to the commissioner and affected consumers.

(b) This part does not create or imply a private cause of action for a violation of this part, nor does this part limit a private cause of action that otherwise exists.