; or (2) any other provision of Federal law unless as specifically authorized by this Act. (b) State law preservation Nothing in this Act shall be construed to preempt, displace, or supplant the following State laws, rules, regulations, or requirements: (1) Consumer protection laws of general applicability such as laws regulating deceptive, unfair, or unconscionable practices. (2) Civil rights laws. (3) Laws that govern the privacy rights or other protections of employees, employee information, or students or student information. (4) Laws that address notification requirements in the event of a data breach. (5) Contract or tort law. (6) Criminal laws governing fraud, theft, unauthorized access to information or unauthorized use of information, malicious behavior, and similar provisions, and laws of criminal procedure. (7) Laws specifying remedies or a cause of action to individuals. (8) Public safety or sector specific laws unrelated to privacy or security. (c) Preemption of directly conflicting State laws Except as provided in subsections (b) and (d), this Act shall supersede any State law to the extent such law directly conflicts with the provisions of this Act, or a standard, rule, or regulation promulgated under this Act, and then only to the extent of such direct conflict. Any State law, rule, or regulation shall not be considered in direct conflict if it affords a greater level of protection to individuals protected under this Act. (d) Preservation of common law or statutory causes of action for civil relief Nothing in this Act, nor any amendment, standard, rule, requirement, assessment, law or regulation promulgated under this Act, shall be construed to preempt, displace, or supplant any Federal or State common law rights or remedies, or any statute creating a remedy for civil relief, including any cause of action for personal injury, wrongful death, property damage, or other financial, physical, reputational, or psychological injury based in negligence, strict liability, products liability, failure to