(a) Purpose. This regulation governs the treatment of nonpublic personal health information and nonpublic personal financial information about individuals by all licensees of the state insurance department. This regulation: - (i) Requires a licensee to provide notice to individuals about its privacy policies and practices;
- (ii) Describes the conditions under which a licensee may disclose nonpublic personal health information and nonpublic personal financial information about individuals to affiliates and nonaffiliated third parties; and
- (iii) Provides methods for individuals to prevent a licensee from disclosing that information.
(b) Scope. This regulation applies to: - (i) Nonpublic personal financial information about individuals who obtain or are claimants or beneficiaries of products or services primarily for personal, family or household purposes from licensees. This regulation does not apply to information about companies or about individuals who obtain products or services for business, commercial or agricultural purposes; and
- (ii) All nonpublic personal health information.
(c) Compliance. A licensee domiciled in this state that is in compliance with this regulation in a state that has not enacted laws or regulations that meet the requirements of Title V of the Gramm-Leach-Bliley Act 15 U.S.C. § 6801 through 6827 may nonetheless be deemed to be in compliance with Title V of the Gramm-Leach-Bliley Act in the other state.