33-19-302. Correction, amendment, or deletion of recorded personal information. (1) Within 30 business days from the date of receipt of a written request from an individual to correct, amend, or delete any recorded personal information in its possession about the individual, an insurance institution, insurance producer, or insurance-support organization shall either:

(a) correct, amend, or delete the portion of the recorded personal information in dispute; or

(b) notify the individual of:

(i) its refusal to make the correction, amendment, or deletion;

(ii) the reasons for the refusal; and

(iii) the individual's right to file a statement as provided in subsection (3).

(2) If the insurance institution, insurance producer, or insurance-support organization corrects, amends, or deletes recorded personal information in accordance with subsection (1)(a), the insurance institution, insurance producer, or insurance-support organization shall notify the individual in writing about the action that it has taken and furnish the correction, amendment, or fact of deletion to:

(a) any person specifically designated by the individual who may have, within the preceding 2 years, received recorded personal information about the individual;

(b) any insurance-support organization whose primary source of personal information is insurance institutions if the insurance-support organization has systematically received recorded personal information from the insurance institution within the preceding 7 years, but the correction, amendment, or fact of deletion need not be furnished if the insurance-support organization no longer maintains recorded personal information about the individual; and

(c) any insurance-support organization that furnished the personal information that has been corrected, amended, or deleted.

(3) Whenever an individual disagrees with an insurance institution's, insurance producer's, or insurance-support organization's refusal to correct, amend, or delete recorded personal information, the individual may file with the insurance institution, insurance producer, or insurance-support organization:

(a) a concise statement setting forth what the individual thinks is the correct, relevant, or fair information; and

(b) a concise statement of the reasons why the individual disagrees with the insurance institution's, insurance producer's, or insurance-support organization's refusal to correct, amend, or delete recorded personal information.

(4) If an individual files either statement described in subsection (3), the insurance institution, insurance producer, or insurance-support organization shall:

(a) file the statement with the disputed personal information and provide a means by which anyone reviewing the disputed personal information will be made aware of the individual's statement and have access to it;

(b) in any subsequent disclosure by the insurance institution, insurance producer, or insurance-support organization of the recorded personal information that is the subject of disagreement, clearly identify the matter in dispute and provide the individual's statement along with the recorded personal information being disclosed; and

(c) furnish the statement to the persons in the manner specified in subsection (2).

(5) The commissioner may review a refusal by an insurance institution, insurance producer, or insurance-support organization to correct, amend, or delete recorded personal information in order to determine if the information is correct. The commissioner may order the insurance institution, insurance producer, or insurance-support organization to correct, amend, or delete information that the commissioner determines is erroneous in an individual's recorded information file.

(6) The rights granted individuals by this section extend to all natural persons to the extent information about them is collected and maintained by an insurance institution, insurance producer, or insurance-support organization in connection with an insurance transaction. The rights granted to natural persons by this subsection do not extend to information about them that relates to and is collected in connection with or in reasonable anticipation of a claim or civil or criminal proceeding involving them.

(7) For the purposes of this section, the term "insurance-support organization" does not include a consumer reporting agency.