The purpose of this title is to establish standards for: data security; and the investigation of and notification to the Commissioner of a cybersecurity event applicable to carriers. This title may not be construed to: create or imply a private cause of action for violation of its provisions; or curtail a private cause of action which would otherwise exist in the absence of this title. Compliance with this title does not relieve a carrier from a duty to comply with any other requirements of federal law or Title 14 of the Commercial Law Article relating to the protection and privacy of personal information.