33-19-202. Notice of insurance information practices. (1) An insurance institution or insurance producer shall provide a notice of information practices to all applicants or policyholders in connection with insurance transactions as provided below:
     (a) in the case of an application for insurance, a notice must be provided no later than:
     (i) at the time of the delivery of the insurance policy or certificate when personal information is collected only from the applicant or from public records; or
     (ii) at the time the collection of personal information is initiated when personal information is collected from a source other than the applicant or public records;
     (b) in the case of a policy renewal, a notice must be provided no later than the policy renewal date, except that notice is not required in connection with a policy renewal if:
     (i) personal information is collected only from the policyholder or from public records; or
     (ii) a notice meeting the requirements of this section has been given within the previous 24 months; or
     (c) in the case of a policy reinstatement or change in insurance benefits, a notice must be provided no later than the time a request for a policy reinstatement or change in insurance benefits is received by the insurance institution, except that notice is not required if personal information is collected only from the policyholder or from public records.
     (2) The notice must be in writing and must state:
     (a) whether personal information may be collected from persons other than the individual or individuals proposed for coverage;
     (b) the types of personal information that may be collected and the types of sources and investigative techniques that may be used to collect the information;
     (c) the types of disclosures identified in subsections (3), (4), (5), (6), (7), (10), (12), and (14) of 33-19-306 and the circumstances under which the disclosures may be made without prior authorization. However, only those circumstances that occur with such frequency as to indicate a general business practice must be described.
     (d) a description of the rights established under 33-19-301 and 33-19-302 and the manner in which those rights may be exercised; and
     (e) that information obtained from a report prepared by an insurance-support organization may be retained by the insurance-support organization and disclosed to other persons.
     (3) In lieu of the notice prescribed in subsection (2), the insurance institution or insurance producer may provide an abbreviated notice informing the applicant or policyholder that:
     (a) personal information may be collected from persons other than the individual or individuals proposed for coverage;
     (b) the information as well as other personal or privileged information subsequently collected by the insurance institution or insurance producer may in certain circumstances be disclosed to third parties without authorization;
     (c) a right of access and correction exists with respect to all personal information collected; and
     (d) the notice prescribed in subsection (2) must be furnished to the applicant or policyholder upon request.
     (4) The obligations imposed by this section upon an insurance institution or insurance producer may be satisfied by another insurance institution or insurance producer authorized to act on its behalf.

     History: En. Sec. 6, Ch. 580, L. 1981; amd. Sec. 1, Ch. 713, L. 1989; amd. Sec. 2, Ch. 212, L. 1999.