Authority: IC 27-1-3-7; IC 27-2-20-3
Affected: IC 27-1-7-2; IC 27-1-12-1; IC 27-1-13-1; IC 27-1-15.6; IC 27-1-15.8; IC 27-1-17-2; IC 27-1-23; IC 27-1-25; IC
27-1-33; IC 27-6-6; IC 27-6-9; IC 27-7-3; IC 27-8-1; IC 27-8-16; IC 27-8-17; IC 27-8-19.8; IC 27-10-3; IC 27-13
Sec. 2.
The following definitions apply throughout this rule:
(1) "Affiliate" means any company that controls, is controlled by, or is under common control with another company.(2) "Clear and conspicuous" means that a notice is reasonably understandable and designed to call attention to the nature and significance of the information in the notice. The following are examples that meet this standard: (A) A licensee makes its notice reasonably understandable if it does the following:(i) Presents the information in the notice in clear, concise sentences, paragraphs, and sections.(ii) Uses short explanatory sentences or bullet lists whenever possible.(iii) Uses definite, concrete, everyday words and active voice whenever possible.(iv) Avoids multiple negatives.(v) Avoids legal and highly technical business terminology whenever possible.(vi) Avoids explanations that are imprecise and readily subject to different interpretations.(B) A licensee designs its notice to call attention to the nature and significance of the information in it if the licensee does the following:(i) Uses a plain-language heading to call attention to the notice.(ii) Uses a typeface and type size that are easy to read.(iii) Provides wide margins and ample line spacing.(iv) Uses boldface or italics for key words.(v) In a form that combines the licensee's notice with other information, uses distinctive type size, style, and graphic devices, such as shading or sidebars.(C) If a licensee provides a notice on a Web page, the licensee designs its notice to call attention to the nature and significance of the information in it if the licensee uses text or visual cues to encourage scrolling down the page if necessary to view the entire notice and ensure that other elements on the Web site, such as text, graphics, hyperlinks, or sound, do not distract attention from the notice, and the licensee does either of the following: (i) Places the notice on a screen that consumers frequently access, such as a page on which transactions are conducted.(ii) Places a link on a screen that consumers frequently access, such as a page on which transactions are conducted, that connects directly to the notice and is labeled appropriately to convey the importance, nature, and relevance of the notice.(3) "Collect" means to obtain information that the licensee organizes or can retrieve by the name of an individual or by identifying number, symbol, or other identifying particular assigned to the individual, irrespective of the source of the underlying information.(4) "Commissioner" means the commissioner of the Indiana department of insurance.(5) "Company" means a corporation, limited liability company, business trust, general or limited partnership, association, sole proprietorship, or similar organization.(6) "Consumer" means an individual who seeks to obtain, obtains, or has obtained an insurance product or service from a licensee that is to be used primarily for personal, family, or household purposes, and about whom the licensee has nonpublic personal information, or that individual's legal representative, including the following: (A) An individual provides nonpublic personal information to a licensee in connection with obtaining or seeking to obtain financial, investment, or economic advisory services relating to an insurance product or service is a consumer regardless of whether the licensee establishes an ongoing advisory relationship.(B) An applicant for insurance prior to the inception of insurance coverage is a licensee's consumer.(C) An individual who is a consumer of another financial institution is not a licensee's consumer solely because the licensee is acting as agent for, or provides processing or other services to, that financial institution.(D) An individual is a licensee's consumer if the individual is: (i) a beneficiary of a life insurance policy underwritten by the licensee;(ii) a claimant under an insurance policy issued by the licensee;(iii) an insured or an annuitant under an insurance policy or an annuity, respectively, issued by the licensee; or(iv) a mortgagor of a mortgage covered under a mortgage insurance policy; and the licensee discloses nonpublic personal financial information about the individual to a nonaffiliated third party other than as permitted under sections 12 through 14 of this rule.(E) Provided that the licensee provides the initial, annual, and revised notices under sections 3, 4, and 7 of this rule to the plan sponsor, group, or blanket insurance policyholder or group annuity contractholder, and further provided that the licensee does not disclose to a nonaffiliated third party nonpublic personal financial information about such an individual other than as permitted under sections 12 through 14 of this rule, an individual is not the consumer of the licensee solely because he or she is:(i) a participant or a beneficiary of an employee benefit plan that the licensee administers or sponsors or for which the licensee acts as a trustee, insurer, or fiduciary; or(ii) covered under a group or blanket insurance policy or group annuity contract issued by the licensee.(F) The individuals described in clause (E) are consumers of a licensee if the licensee does not meet all the conditions of this subdivision. In no event shall the individuals, solely by virtue of the status described in clause (E), be deemed to be customers.(G) An individual is not a licensee's consumer solely because he or she is a beneficiary of a trust for which the licensee is a trustee.(H) An individual is not a licensee's consumer solely because he or she has designated the licensee as trustee for a trust.(7) "Consumer reporting agency" has the same meaning as Section 603(f) of the federal Fair Credit Reporting Act ( 15 U.S.C. 1681a(f)) .(8) "Control" means any of the following: (A) Ownership, control, or power to vote twenty-five percent (25%) or more of the outstanding shares of any class of voting security of the company, directly or indirectly, or acting through one (1) or more other persons.(B) Control in any manner over the election of a majority of the directors, trustees, or general partners (or individuals exercising similar functions) of the company.(C) The power to exercise, directly or indirectly, a controlling influence over the management or policies of the company, as the commissioner determines.(9) "Customer" means a consumer who has a customer relationship with a licensee. A beneficiary or a claimant shall not be deemed a customer solely by virtue of his or her status as a beneficiary or a claimant.(10) "Customer relationship" means a continuing relationship between a consumer and a licensee under which the licensee provides one (1) or more insurance products or services to the consumer that are to be used primarily for personal, family, or household purposes, including the following: (A) A consumer has a continuing relationship with a licensee if the consumer:(i) is a current policyholder of an insurance product issued by or through the licensee; or(ii) obtains financial, investment, or economic advisory services relating to an insurance product or service from the licensee for a fee.(B) A consumer does not have a continuing relationship with a licensee in any of the following circumstances: (i) The consumer applies for insurance but does not purchase the insurance.(ii) The licensee sells the consumer airline travel insurance in an isolated transaction.(iii) The individual is no longer a current policyholder of an insurance product or no longer obtains insurance services with or through the licensee.(iv) The consumer is a beneficiary or claimant under a policy and has submitted a claim under a policy choosing a settlement option involving an ongoing relationship with the licensee.(v) The consumer is a beneficiary or a claimant under a policy and has submitted a claim under that policy choosing a lump sum settlement option.(vi) The customer's policy is lapsed, expired, or otherwise inactive or dormant under the licensee's business practices, and the licensee has not communicated with the customer about the relationship for a period of twelve(12) consecutive months, other than annual privacy notices, material required by law or rule, communication at the direction of a state or federal authority, or promotional materials. (vii) The individual is an insured or an annuitant under an insurance policy or annuity, respectively, but is not the policyholder or owner of the insurance policy or annuity.(viii) For purposes of this rule, the individual's last known address, according to the licensee's records, is deemed invalid. An address of record is deemed invalid if mail sent to that address by the licensee has been returned by the postal authorities as undeliverable and if subsequent attempts by the licensee to obtain a current valid address for the individual have been unsuccessful. (11) "Financial institution" means any institution the business of which is engaging in activities that are financial in nature or incidental to such financial activities as described in Section 4(k) of the Bank Holding Company Act of 1956, 12 U.S.C. 1843(k). The term does not include any of the following: (A) Any person or entity with respect to any financial activity that is subject to the jurisdiction of the Commodity Futures Trading Commission under the Commodity Exchange Act, 7 U.S.C. 1 et seq.(B) The Federal Agricultural Mortgage Corporation or any entity charged and operating under the Farm Credit Act of 1971, 12 U.S.C. 2001 et seq.(C) Institutions chartered by Congress specifically to engage in securitizations, secondary market sales (including sales of servicing rights), or similar transactions related to a transaction of a consumer, as long as the institutions do not sell or transfer nonpublic personal information to a nonaffiliated third party.(12) "Financial product or service" means any product or service that a financial holding company could offer by engaging in an activity that is financial in nature or incidental to such a financial activity under Section 4(k) of the Bank Holding Company Act of 1956, 12 U.S.C. 1843(k). Financial service includes a financial institution's evaluation or brokerage of information that the financial institution collects in connection with a request or an application from a consumer for a financial product or service.(13) "Health information" means any information or data, except age or gender, whether oral or recorded in any form or medium, created by or derived from a health care provider or the consumer that relates to any of the following: (A) The past, present, or future physical, mental, or behavioral health or condition of an individual.(B) The provision of health care to an individual.(C) Payment for the provision of health care to an individual.(14) "Insurance product or service" means any product or service that is offered by a licensee pursuant to the insurance laws of this state. Insurance service includes a licensee's evaluation, brokerage, or distribution of information that the licensee collects in connection with a request or an application from a consumer for an insurance product or service.(15) "Licensee" means all licensed insurers, health maintenance organizations, agents, producers, and other persons licensed or required to be licensed, or authorized or required to be authorized, or registered or required to be registered under IC 27. The following requirements apply:(A) A licensee is not subject to the notice and opt out requirements for nonpublic personal financial information set forth in section 1 of this rule, this section, and sections 3 through 15 of this rule if the licensee is an employee, agent, or other representative of another licensee and: (i) the other licensee otherwise complies with, and provides the notices required by this rule; and(ii) the licensee does not disclose any nonpublic personal information to any person other than the principal or its affiliates in a manner permitted by this rule.(B) A licensee also includes an unauthorized insurer that accepts business placed through a licensed surplus lines broker in this state, but only in regard to the surplus lines placements placed pursuant to IC 27-1-15.5-5. A surplus lines broker or surplus lines insurer shall be deemed to be in compliance with the notice and opt out requirements for nonpublic personal financial information set forth in section 1 of this rule, this section, and sections 3 through 15 of this rule provided the following: (i) The surplus lines agent or insurer does not disclose nonpublic personal information of a consumer or a customer to nonaffiliated third parties for any purpose, including joint servicing or marketing under section 12 of this rule, except as permitted by section 13 or 14 of this rule.(ii) The surplus lines agent or insurer delivers a notice to the consumer at the time a customer relationship is established on which the following is printed in 16-point type: PRIVACY NOTICE NEITHER THE U.S. SURPLUS LINES AGENTS THAT HANDLED THIS INSURANCE NOR THE INSURERS THAT HAVE UNDERWRITTEN THIS INSURANCE WILL DISCLOSE NONPUBLIC PERSONAL INFORMATION CONCERNING THE BUYER TO NONAFFILIATES OF THE BROKERS OR INSURERS EXCEPT AS PERMITTED BY LAW.
(16) "Nonaffiliated third party" means any person except a licensee's affiliate or a person employed jointly by a licensee and any company that is not the licensee's affiliate. The term includes either of the following:(A) The other company that jointly employs the person.(B) Any company that is an affiliate solely by virtue of the direct or indirect ownership or control of the company by the licensee or its affiliate in conducting merchant banking or investment banking activities or insurance company investment activities of the type described in the federal Bank Holding Company Act, 12 U.S.C. 1843(k)(4)(H) and 12 U.S.C. 1843(k)(4)(I).(17) "Nonpublic personal financial information" means personally identifiable financial information and any list, description, or other grouping of consumers (and publicly available information pertaining to them) that is derived using any personally identifiable financial information that is not publicly available, including the following: (A) The term includes any list of individuals' names and street addresses that is derived in whole or in part using personally identifiable financial information that is not publicly available, such as account numbers.(B) The term does not include any of the following:(ii) Publicly available information, except as included on a list described in subdivision (21).(iii) Any list, description, or other grouping of consumers (and publicly available information pertaining to them) that is derived without using any personally identifiable financial information that is not publicly available. (C) The term does not include any list of individuals' names and addresses that contains only publicly available information, is not derived in whole or in part using personally identifiable financial information that is not publicly available, and is not disclosed in a manner that indicates that any of the individuals on the list is a consumer of a financial institution.(18) "Nonpublic personal information" means nonpublic personal financial information.(19) "Personally identifiable financial information" means information a consumer provides to a licensee to obtain an insurance product or service from the licensee, information about a consumer resulting from a transaction involving an insurance product or service between a licensee and a consumer, or information the licensee otherwise obtains about a consumer in connection with providing an insurance product or service to that consumer, including the following:(A) The term includes the following:(i) Information a consumer provides to a licensee on an application to obtain an insurance product or service.(ii) Account balance information and payment history.(iii) The fact that an individual is or has been one of the licensee's customers or has obtained an insurance product or service from the licensee.(iv) Any information about the licensee's consumer if it is disclosed in a manner that indicates that the individual is or has been the licensee's consumer.(v) Any information that a consumer provides to a licensee or that the licensee or its agent otherwise obtains in connection with collecting on a loan or servicing a loan.(vi) Any information the licensee collects through an Internet cookie (an information-collecting device from a Web server). (vii) Information from a consumer report.(B) The term does not include the following:(ii) A list of names and addresses of customers of an entity that is not a financial institution.(iii) Information that does not identify a consumer, such as aggregate information or blind data that does not contain personal identifiers, such as account numbers, names, or addresses.(20) "Producer" means a person licensed under IC 27-1-15.5, IC 27-1-15.6, or IC 27-1-15.8.(21) "Publicly available information" means any information that a licensee has a reasonable basis to believe is lawfully made available to the general public from federal, state, or local government records, widely distributed media, or disclosures to the general public that are required to be made by federal, state, or local law. The following requirements apply:(A) A licensee has a reasonable basis to believe that information is lawfully made available to the general public if the licensee has taken steps to determine that the information is of the type that is available to the general public and whether an individual can direct that the information not be made available to the general public, and, if so, that the licensee's consumer has not done so.(B) Publicly available information in government records includes information in government real estate records and security interest filings.(C) Publicly available information from widely distributed media includes information from a: (v) Web site; that is available to the general public on an unrestricted basis. A Web site is not restricted merely because an Internet service provider or a site operator requires a fee or a password, so long as access is available to the general public.(D) A licensee has a reasonable basis to believe that mortgage information is lawfully made available to the general public if the licensee has determined that the information is of the type included on the public record in the jurisdiction where the mortgage would be recorded.(E) A licensee has a reasonable basis to believe that an individual's telephone number is lawfully made available to the general public if the licensee has located the telephone number in the telephone book or the consumer has informed you that the telephone number is not unlisted.Department of Insurance; 760 IAC 1-67-2; filed Aug 31, 2001, 9:40 a.m.: 25 IR 85; readopted filed Nov 27, 2007, 4:01 p.m.: 20071226-IR-760070717RFA; readopted filed November 26, 2013, 3:43 p.m.: 20131225-IR-760130479RFAReadopted filed 11/19/2019, 9:18 a.m.: 20191218-IR-760190497RFA