18.3 Privacy, Fraud, and Consumer Protection
Key Takeaways
- GLBA requires initial/annual privacy notices and an opt-out for sharing nonpublic personal information (NPI).
- FCRA requires an adverse action notice naming the reporting agency when a consumer report causes declination or higher rates.
- Hard fraud fabricates a loss entirely; soft fraud pads or exaggerates an otherwise legitimate claim.
- A misrepresentation is material if the insurer would have declined the risk or charged a different premium had it known the truth.
- The Concealment, Misrepresentation, or Fraud policy condition can void coverage for intentional material misstatements before or after a loss.
Federal Privacy Framework
Two federal regimes dominate the privacy questions on the national exam.
- Gramm-Leach-Bliley Act (GLBA) — requires financial institutions, including insurers and producers, to give an initial and annual privacy notice and to let consumers opt out of sharing nonpublic personal information (NPI) with nonaffiliated third parties.
- Fair Credit Reporting Act (FCRA) — governs use of consumer reports (including credit-based insurance scores). If an insurer takes an adverse action (declination, higher premium, reduced coverage) based on a report, it must send an adverse action notice disclosing the reporting agency and the consumer's right to a free copy and to dispute errors.
Privacy Notices and Information Types
| Term | Meaning |
|---|---|
| NPI (nonpublic personal information) | Personally identifiable financial info not publicly available |
| Opt-out right | Consumer may block sharing of NPI with nonaffiliated third parties |
| Consumer report (FCRA) | Info bearing on creditworthiness used to evaluate eligibility |
| Investigative consumer report | Based on personal interviews; consumer must be notified within 3 days |
| Adverse action notice | Required when a report causes declination or higher rates |
The HIPAA privacy rule additionally protects protected health information (PHI) relevant when health data is used in underwriting certain P&C-adjacent coverages.
An auto insurer declines an applicant largely because of a low credit-based insurance score from a consumer reporting agency. Which federal law requires the insurer to notify the applicant and identify the agency?
Insurance Fraud
Fraud is a knowing misrepresentation of a material fact made to obtain something of value. Two directions are tested:
- Hard fraud — fabricating a loss entirely (staging an accident, torching a building, faking a theft).
- Soft fraud (opportunistic) — exaggerating an otherwise legitimate claim (padding a real fender-bender with old damage).
Fraud can be committed by applicants (lying on an application), claimants (inflating losses), and producers/insurers (the UTPA acts in 18.1). The federal Fraud and False Statements / mail and wire fraud statutes and state insurance-fraud bureaus impose felony penalties, restitution, and license revocation.
Anti-Fraud Tools and Warnings
- Most states require a fraud warning printed on applications and claim forms (e.g., 'Any person who knowingly files a false claim is guilty of a crime').
- Many policies contain a Concealment, Misrepresentation, or Fraud condition that voids coverage if the insured intentionally conceals or misrepresents a material fact, before or after a loss.
- The material misrepresentation standard: a misstatement is material if the insurer would have declined the risk or charged a different premium had it known the truth.
Note the difference from innocent misrepresentation on a P&C policy — materiality and intent drive whether coverage is voided.
Worked Example — Material Misrepresentation
An applicant states a building is sprinklered to obtain a 15% rate credit when it is not. Annual premium quoted: $10,000 (already reflecting the credit). Without the false credit the true premium would be $10,000 / 0.85 ≈ $11,765. Because the insurer would have charged a higher premium had it known the truth, the misrepresentation is material — the carrier may rescind the policy or void coverage for a related loss under the Concealment/Fraud condition. The exam tests that materiality, not the size of the lie, governs the outcome.
State Anti-Fraud Infrastructure and Federal Overlay
Most states operate an Insurance Fraud Bureau within the department of insurance or attorney general's office, and many require insurers to file a written anti-fraud plan and report suspected fraud with civil immunity for good-faith reporting. On the federal side, 18 U.S.C. 1033/1034 makes it a crime for a person convicted of a felony involving dishonesty to work in the business of insurance without written consent from the state regulator — a frequently tested rule.
Penalties for insurance fraud commonly include fines, restitution, imprisonment, and license revocation; the felony bar under 1033 can permanently end a producer's career.
Consumer Protection Wrap-Up
Consumer-protection rules tie the privacy and fraud topics together. Insurers must provide clear policy summaries and disclosures, honor free-look periods where applicable, maintain complaint registers, and respond to department of insurance inquiries within set timeframes. Telemarketing and electronic solicitation are further limited by Do-Not-Call rules and the CAN-SPAM requirements for commercial email. The unifying exam theme: the consumer must receive honest information, control over personal data, a fair claims process, and an accessible complaint and dispute pathway through the state regulator.
The 1033 Felony Bar in Depth
The federal 18 U.S.C. 1033/1034 prohibition is one of the most frequently tested fraud rules. It makes it a federal crime for anyone convicted of a felony involving dishonesty or breach of trust to engage in the business of insurance affecting interstate commerce without written consent (a 1033 waiver) from the state insurance regulator.
The bar reaches producers, adjusters, and company personnel alike, and it applies regardless of whether the underlying felony was insurance-related. A producer with such a conviction who works without obtaining the waiver commits a separate federal offense. The exam tests both the existence of the bar and the written-consent exception that allows rehabilitation in appropriate cases.
Materiality Drives Rescission, Not the Size of the Lie
The consistent thread across the fraud material is that materiality, not the magnitude of a misstatement, determines whether an insurer can rescind or void coverage. A misrepresentation is material if the insurer would have declined the risk or charged a different premium had it known the truth. A small lie about a sprinkler system that changes the rate is material; a large but irrelevant misstatement may not be.
The Concealment, Misrepresentation, or Fraud condition then permits the insurer to void coverage for that material misstatement, whether made at application or at claim time. Pair this with the fraud-warning requirement and the difference between hard and soft fraud, and you have the complete framework the exam uses for fraud and rescission questions.
Tying Privacy, Fraud, and Consumer Protection Together
The three strands of this section reinforce one consumer-protection goal. Privacy rules (GLBA, FCRA, HIPAA) give consumers control over their personal and credit information and require adverse-action notices when data drives a declination or higher rate. Fraud rules protect the integrity of the risk pool by criminalizing material misrepresentation from any direction - applicant, claimant, or producer. Consumer-protection rules guarantee honest disclosures, complaint registers, and an accessible appeal to the regulator.
Viewing them as a single system - control of data, integrity of claims, and access to redress - helps you place an unfamiliar scenario into the right regime quickly.
An insured exaggerates a genuine $4,000 hail claim by adding $3,000 of pre-existing damage. This conduct is BEST classified as: