18.3 Privacy, Fraud, and Consumer Protection

Privacy — The Gramm-Leach-Bliley Act (GLBA)

GLBA (1999) requires financial institutions, including insurers, to protect consumers' nonpublic personal information (NPI)—data such as Social Security numbers, account numbers, claims history, and health details collected in connection with a policy. The core obligations:

• Provide a clear initial privacy notice at the start of the relationship.
• Provide an annual privacy notice describing information-sharing practices.
• Provide a reasonable opt-out before disclosing NPI to nonaffiliated third parties.
• Maintain administrative, technical, and physical safeguards for the data.

Exam Key: The opt-out applies to sharing NPI with NONAFFILIATED third parties. Sharing with affiliates or as needed to service the policy (claims processing, reinsurance, legal compliance) generally does NOT require opt-out.

GLBA recognizes two information types: financial information and (under related rules and HIPAA) health information. Health data carries heightened consent requirements.

Credit and Consumer Reports — The Fair Credit Reporting Act (FCRA)

When an insurer pulls a credit-based insurance score or a consumer report (from a consumer reporting agency such as a CLUE loss-history report), the FCRA applies. Key duties:

An adverse action is any decision that is unfavorable to the consumer based in whole or part on a report—declination, nonrenewal, or a higher premium. The consumer must be told they can obtain a free copy of the report and dispute inaccuracies.

Insurance Fraud

Fraud is a knowing misrepresentation made to obtain money or coverage one is not entitled to. Two categories appear on the exam:

• Hard fraud — a deliberately fabricated loss (staging a theft, faking an accident, arson for profit).
• Soft fraud — exaggerating an otherwise legitimate claim (padding a real water-damage claim with pre-existing damage). Soft fraud is still a crime, even though a real loss occurred.

The Federal Bar — 18 U.S.C. 1033/1034

The federal Violent Crime Control Act added 18 U.S.C. 1033 and 1034, making it a federal crime for anyone convicted of a felony involving dishonesty or breach of trust to engage in the business of insurance affecting interstate commerce without written consent from the state insurance regulator. This is why background checks screen for dishonesty felonies and why a producer must disclose convictions.

The Fraud Warning Statement

Applications and claim forms carry a fraud warning stating that anyone who knowingly provides false information is committing a crime and may be subject to fines and imprisonment. The statement preserves the insurer's right to deny the claim, rescind the policy, and refer the matter for prosecution. A producer who helps a client pad a claim shares in the criminal exposure.

Other Consumer-Protection Mechanisms

• Free-look period — applicants may review a delivered policy (commonly 10 to 30 days) and return it for a full refund.
• Replacement disclosures — when replacing coverage, producers must give comparison and notice forms so the consumer understands what they are giving up (ties back to twisting/churning).
• Producer training/anti-fraud — many states require insurers to maintain anti-fraud plans and Special Investigation Units (SIUs) to detect and report suspected fraud to the department.

Together, GLBA, FCRA, the federal fraud bar, and state disclosure rules form a consumer-protection net: the insurer must guard the consumer's data, justify adverse decisions, and neither commit nor tolerate fraud.

Terrorism, Telemarketing, and Other Federal Overlays

A few more federal touchpoints appear on the National portion. The Terrorism Risk Insurance Act (TRIA) requires commercial property and casualty insurers to offer terrorism coverage and disclose its premium; the insured may accept or reject it, but the offer is mandatory. The federal Do-Not-Call and CAN-SPAM rules limit unsolicited telemarketing and email when producers prospect. And the USA PATRIOT Act anti-money-laundering rules touch insurers that sell products with cash value. You will rarely see deep questions on these, but recognizing the names prevents being thrown by an unfamiliar option.

Exam Key: SOFT fraud (padding a real claim) is just as illegal as HARD fraud (a staged or fabricated loss). The existence of a genuine underlying loss does NOT excuse the exaggeration—both are crimes.

The Producer's Anti-Fraud Role

Producers are the front line against fraud. Red flags include a client who is over-eager about coverage just before a loss, inflated repair estimates, claims filed immediately after a policy is bound, and reluctance to provide documentation. A producer who knowingly assists a false application or claim does not merely lose a sale—they expose themselves to the same criminal statutes and to revocation. The correct response to a suspected fraudulent claim is to report it to the insurer's Special Investigation Unit, not to look the other way to keep a client.

Tying Privacy, Fraud, and Protection Together

A candidate who can match each law to the harm it prevents and the action it requires will handle the consumer-protection questions confidently—these statutes are tested by recognition far more than by fine detail.