Unless a licensee is providing privacy notices directly to covered individuals described in Section 4.G.5.a., b. or c., a licensee shall provide initial, annual and revised notices to the plan sponsor, group or blanket insurance policyholder or group annuity contractholder, or workers' compensation policyholder, in the manner described in Sections 5 through 9 of this regulation, describing the licensee's privacy practices with respect to nonpublic personal information about individuals covered under the policies, contracts or plans.
3 CCR 702-6-4-1-10