Insurers Largely Pleased With Actions By States On Privacy

Some adjustment was made, says Mahrt, who adds that just prior to a four-hour hearing on June 25, a change was made that would have allowed for an opt-out for affiliates, but an opt-in for information sharing with third parties.

The bill can be revisited in January 2002 or another bill, Assembly bill 784, could be considered, Mahrt says.

If S.B. 773 is taken up again, Mahrt says a concern that needs to be addressed is a personal right of action provision that could result in a $1,000 fine per letter for each privacy infraction. That would have a "huge impact" on insurers, particularly the small insurance broker, she says. "It is also an open invitation to class-action suits," she adds.

In Vermont, insurers say an attempt to incorporate privacy standards using standards banks now have, including an opt-in for non- affiliates, will raise challenges if pursued.

The department will be reissuing a final regulation by the end of the summer and will probably not have an opt-out for joint marketing. An opt-in requirement would be established for non-affiliates. For affiliates, there would be an opt-in requirement to the extent it is required by the Vermont Fair Credit Reporting Act.

If the opt-in approach from the banking standards is part of the insurance standards, the proposed regulation will be challenged at the state's legislative review level, Lovendusky says. There is a lack of authority to borrow banking standards, he says.

A bill to repeal the opt-in, H.B. 228, has floundered, but could be revisited when the legislature reconvenes. H.B. 228 says privacy requirements can be no more restrictive than GLB and creates opt-out language except for health information.

Vermont is "most problematic," says Rey Becker, a vice president with the Alliance of American Insurers, Downers Grove, Ill. The regulation could provide opt-ins for non-affiliates. "The Vermont regulation could end up in the courts at some point," Becker predicts.

Elizabeth Costle, commissioner of the Vermont department of banking, insurance, securities and health care administration, says a final regulation should be in place over the summer.

There are currently no privacy regulations on the books for insurers, but there is a privacy regulation for banks as well as the Vermont Fair Credit Reporting Act.

The proposed regulation that insurers will be held to is an opt-in standard for both nonpublic health and financial information with a joint marketing exception, Costle says. In fact, she says, a joint marketing exception will also have to be carved out for banks.

Reproduced from National Underwriter Life & Health/Financial Services Edition, July 6, 2001. Copyright 2001 by The National Underwriter Company in the serial publication. All rights reserved.Copyright in this article as an independent work may be held by the author.

Copyright 2001 by The National Underwriter Company. All rights reserved. Contact Webmaster