Montana Code 33-19-202. Notice of insurance information practices — delivery of notice
33-19-202. Notice of insurance information practices — delivery of notice. A licensee shall provide a clear and conspicuous notice of information practices that accurately reflects its privacy policies and practices to individuals about whom personal information is collected and disclosed by the licensee in connection with insurance transactions as follows:
Terms Used In Montana Code 33-19-202
- Applicant: means a person who seeks to contract for insurance coverage other than a person seeking group insurance that is not individually underwritten. See Montana Code 33-19-104
- Fair Credit Reporting Act: A federal law, established in 1971 and revised in 1997, that gives consumers the right to see their credit records and correct any mistakes. Source: OCC
- Individual: means a natural person who:
(a)regarding property or casualty insurance, is a past, present, or proposed named insured or certificate holder;
(b)regarding life, health, or disability insurance, is a past, present, or proposed principal insured or certificate holder;
(c)is a past, present, or proposed policyowner;
(d)is a past or present applicant;
(e)is a past or present claimant; or
(f)derived, derives, or is proposed to derive insurance coverage under an insurance policy or certificate subject to this chapter. See Montana Code 33-19-104
- Insurance institution: means a corporation, association, partnership, reciprocal exchange, interinsurer, Lloyd's insurer, fraternal benefit society, or other person engaged in the business of insurance, including health maintenance organizations, and health service corporations as defined in 33-30-101. See Montana Code 33-19-104
- Insurance producer: means an insurance producer as defined in 33-17-102 and 33-30-311. See Montana Code 33-19-104
- Insurance-support organization: means a person who assembles or collects information about natural persons for the purpose of providing the information to an insurance institution or insurance producer for insurance transactions, including:
(i)the furnishing of consumer reports or investigative consumer reports to an insurance institution or insurance producer for use in connection with an insurance transaction; or
(ii)the collection of personal information from insurance institutions, insurance producers, or other insurance-support organizations for the purpose of detecting or preventing fraud, material misrepresentation, or material nondisclosure in connection with insurance underwriting or insurance claim activity. See Montana Code 33-19-104
- Licensee: means :
(a)an insurance institution, insurance producer, or other person who is licensed or required to be licensed, authorized or required to be authorized, or registered or required to be registered pursuant to this title; or
(b)a surplus lines insurer. See Montana Code 33-19-104
- Medical record information: means personal information that:
(a)relates to an individual's physical or mental condition, medical history, medical claims history, or medical treatment; and
(b)is obtained from a medical professional or medical care institution, from the individual, or from the individual's spouse, parent, or legal guardian. See Montana Code 33-19-104
- Personal information: means any individually identifiable information gathered in connection with an insurance transaction from which judgments can be made about an individual's character, habits, avocations, finances, occupation, general reputation, credit, health, or any other personal characteristics. See Montana Code 33-19-104
- Policyholder: means a person who:
(a)in the case of individual property or casualty insurance, is a present named insured;
(b)in the case of individual life, health, or disability insurance, is a present policyowner; or
(c)in the case of group insurance that is individually underwritten, is a present group certificate holder. See Montana Code 33-19-104
- Privileged information: means any individually identifiable information that:
(a)relates to a civil or criminal proceeding involving an individual; and
(b)is collected in connection with or in reasonable anticipation of a claim for insurance benefits or civil or criminal proceeding involving an individual. See Montana Code 33-19-104
- State: when applied to the different parts of the United States, includes the District of Columbia and the territories. See Montana Code 1-1-201
- Writing: includes printing. See Montana Code 1-1-203
(1)(a) Except as provided in subsection (2), in the case of a policyholder or certificate holder, a notice must be delivered by an insurance institution:
(i)in the case of policies issued after July 1, 2001, no later than at the time of the delivery of the insurance policy or certificate, unless the notice delivered to the policyholder or certificate holder pursuant to subsection (5)(a) when the policyholder or certificate holder was an applicant is still accurate; and
(ii)within 60 days after any material change, other than typographical, in the insurance institution’s privacy policies or practices.
(b)When a policyholder or certificate holder obtains a new insurance product or service or when a policy is reinstated and any notices already provided are no longer accurate with respect to the new product, service, or reinstatement, a new or revised and accurate notice must be delivered to the policyholder or certificate holder no later than the time that the product or service is provided by the licensee or at the time of reinstatement.
(2)(a) An insurance institution is not required to meet the requirements of this section with respect to certificate holders until the insurance institution has personally identifiable information regarding the certificate holder.
(b)Until the notice requirements of subsection (1) are met, a third-party administrator or other agent or representative of an insurance institution may not disclose personal information, except as allowed in 33-19-306(2).
(3)The notice required in subsection (1) must be in writing and must state:
(a)the categories of personal information that may be collected from persons other than the individual or individuals covered;
(b)if a licensee discloses personal or privileged information to a third party without an authorization pursuant to an exception in 33-19-306 or 33-19-307, a separate description of the categories of information and the categories of third parties to whom the licensee discloses personal information;
(c)the categories of personal information about a former policyholder or certificate holder that the licensee discloses pursuant to 33-19-306 and 33-19-307 and the categories of persons to whom the disclosure may be made;
(d)any disclosure that the licensee makes pursuant to section 603(d)(2)(A)(iii) of the Fair Credit Reporting Act, 15 U.S.C. § 1681, et seq.; and
(e)the licensee’s policies and practices with respect to protecting the confidentiality and security of personal and privileged information.
(4)The following information must be contained in the initial notice delivered at the time of application and in any subsequent notice:
(a)a description of the rights established under 33-19-301 and 33-19-302 and the manner in which those rights may be exercised;
(b)that information obtained from a report prepared by an insurance-support organization may be retained by the insurance-support organization and disclosed to other persons if the licensee collects or uses information from or discloses personal information to an insurance-support organization; and
(c)that an individual is entitled to receive, upon written request to the licensee, a record of any subsequent disclosures of medical record information, as described in 33-19-301, made by the licensee pursuant to 33-19-306 and 33-19-307.
(5)In the case of individuals who are not policyholders or certificate holders:
(a)except as provided in subsection (8), in the case of an applicant, an insurance institution shall provide a notice as described in subsection (3) when the applicant submits an application;
(b)for all other individuals, a notice must be given when a licensee seeks an authorization pursuant to 33-19-306(2) to make a disclosure that is not allowed by a disclosure exception provided for in 33-19-306(3) through (24) or 33-19-307. A notice given pursuant to this subsection (5)(b) may be in an abbreviated form and must state that:
(i)personal information may be collected from persons other than the individual or individuals proposed for coverage;
(ii)the information as well as other personal or privileged information subsequently collected by the insurance institution or insurance producer may in certain circumstances be disclosed to third parties without authorization;
(iii)a right of access and correction exists with respect to all personal information collected; and
(iv)the notice prescribed in subsection (3) must be furnished upon request. The abbreviated notice provided for in this subsection (5)(b) must explain a reasonable means by which an individual may obtain that notice.
(6)The obligations imposed by this section upon a licensee may be satisfied:
(a)by another licensee authorized to act on its behalf;
(b)by sending a notice to the primary policyholder of an individual policy or to the primary certificate holder.
(7)A licensee shall provide a notice required by this section so that an intended recipient can reasonably be expected to receive actual notice in writing or, if the intended recipient agrees, electronically, as follows:
(a)by hand-delivering a printed copy of the notice to the intended recipient;
(b)by mailing a printed copy of the notice to the last-known address of the individual separately or in a policy, billing, or other written communication; or
(c)for an individual who has agreed to conduct transactions electronically, as provided in applicable law, by posting the notice on the electronic site and requiring the individual to acknowledge receipt of the notice as a necessary step to obtaining a particular insurance product or service.
(8)An insurance institution may provide the notice required in subsection (5)(a) telephonically if an application is submitted by telephone. A telephone notice under this subsection may be in abbreviated form as provided for in subsections (5)(b)(i) through (5)(b)(iv).
(9)A licensee may satisfy the notice requirements in this section through the use of combined or separate notices. If more than one notice form is used, the licensee shall refer the individual to state specific notice forms that may be used. Any national notice form must give individuals clear and conspicuous notice that when state law is more protective of individuals than federal privacy law, the licensee will protect information in accordance with state law.