Chapter 610

610.70(3)(e) (e) Any copy of recorded personal medical information provided under par. (a) or (b) shall include the identity of the source of the information if the source is a health care provider or a medical care institution.

610.70(3)(f) (f) An insurer may charge the individual a reasonable fee to cover the costs incurred in providing a copy of recorded personal medical information under par. (a) or (b).

610.70(3)(g) (g) The requirements for an insurer under this subsection may be satisfied by another insurer, an insurance agent, an insurance support organization or any other entity authorized by the insurer to act on its behalf.

610.70(3)(h) (h) The requirements under this subsection do not apply to information concerning an individual that relates to, and that is collected in connection with or in reasonable anticipation of, a claim or civil or criminal proceeding involving the individual.

610.70(4) (4) Correction, amendment or deletion of recorded personal medical information.

610.70(4)(a) (a) Within 30 business days after receiving a written request from an individual to correct, amend or delete any recorded personal medical information that is in the insurer’s possession, an insurer shall do either of the following:

610.70(4)(a)1. 1. Comply with the request.

610.70(4)(a)2. 2. Notify the individual of all of the following:

610.70(4)(a)2.a. a. That the insurer refuses to comply with the request.

610.70(4)(a)2.b. b. The reasons for the refusal.

610.70(4)(a)2.c. c. That the individual has a right to file a statement as provided in par. (c).

610.70(4)(b) (b) An insurer that complies with a request under par. (a) shall notify the individual of that compliance in writing and furnish the correction, amendment or fact of deletion to all of the following:

610.70(4)(b)1. 1. Any person who may have received, within the preceding 2 years, the recorded personal medical information concerning the individual and who is specifically designated by the individual.

610.70(4)(b)2. 2. Any insurance support organization for which insurers are the primary source of personal medical information and to which the insurer, within the preceding 7 years, has systematically provided recorded personal medical information. This subdivision does not apply to an insurance support organization that does not maintain recorded personal medical information concerning the individual.

610.70(4)(b)3. 3. Any insurance support organization that furnished to the insurer the personal medical information that has been corrected, amended or deleted.

610.70(4)(c) (c) If an insurer refuses to comply with a request under par. (a) 1., the individual making the request may file with the insurer, an insurance agent or an insurance support organization any of the following:

610.70(4)(c)1. 1. A concise statement setting forth the information that the individual believes to be correct, relevant or fair.

610.70(4)(c)2. 2. A concise statement setting forth the reasons why the individual disagrees with the insurer’s refusal to correct, amend or delete the recorded personal medical information.

610.70(4)(d) (d) If the individual files a statement under par. (c), the insurer shall do all of the following:

610.70(4)(d)1. 1. File any statement filed by the individual under par. (c) with the recorded personal medical information that is the subject of the request under par. (a) in such a manner that any person reviewing the recorded personal medical information will be aware of and have access to the statement.

610.70(4)(d)2. 2. In any subsequent disclosure by the insurer of the recorded personal medical information, clearly identify any matter in dispute and provide any statement filed by the individual under par. (c) that relates to the recorded personal medical information along with the information.

610.70(4)(d)3. 3. Furnish any statement filed by the individual under par. (c) to any person to whom the insurer would have been required to furnish a correction, amendment or fact of deletion under par. (b).

610.70(4)(e) (e) The requirements under this subsection do not apply to information concerning an individual that relates to, and that is collected in connection with or in reasonable anticipation of, a claim or civil or criminal proceeding involving the individual.

610.70(5) (5) Disclosure of personal medical information by insurers. Any disclosure by an insurer of personal medical information concerning an individual shall be consistent with the individual’s signed disclosure authorization form, unless the disclosure satisfies any of the following:

610.70(5)(a) (a) Is otherwise authorized by the individual, or by a person who is authorized to consent on behalf of an individual who lacks the capacity to consent.

610.70(5)(b) (b) Is reasonably related to the protection of the insurer’s interests in the assessment of causation, fault or liability or in the detection or prevention of criminal activity, fraud, material misrepresentation or material nondisclosure.

610.70(5)(c) (c) Is made to an insurance regulatory authority or in response to an administrative or judicial order, including a search warrant or subpoena, that is valid on its face.

610.70(5)(d) (d) Is otherwise permitted by law.

610.70(5)(e) (e) Is made for purposes of pursuing a contribution or subrogation claim.

610.70(5)(f) (f) Is made to a professional peer review organization, bill review organization, health care provider or medical consultant or reviewer for the purpose of reviewing the services, fees, treatment or conduct of a medical care institution or health care provider.

610.70(5)(g) (g) Is made to a medical care institution or health care provider for any of the following purposes:

610.70(5)(g)1. 1. Verifying insurance coverage or benefits.

610.70(5)(g)2. 2. Conducting an operations or services audit to verify the individuals treated by the health care provider or at the medical care institution.

610.70(5)(h) (h) Is made to a network plan that is offered by an insurer in order to make arrangements for coordinated health care in which personal medical information concerning an individual is available for providing treatment, making payment for health care under the plan and undertaking such plan operations as are necessary to fulfill the contract for provision of coordinated health care.

610.70(5)(i) (i) Is made to a group policyholder for the purpose of reporting claims experience or conducting an audit of the insurer’s operations or services. Disclosure may be made under this paragraph only if the disclosure is reasonably necessary for the group policyholder to conduct the review or audit.

610.70(5)(j) (j) Is made for purposes of enabling business decisions to be made regarding the purchase, transfer, merger, reinsurance or sale of all or part of an insurance business.

610.70(5)(k) (k) Is made for purposes of actuarial or research studies or for accreditation or auditing. With respect to a disclosure made under this paragraph, any materials that allow for the identification of an individual must be returned to the insurer or destroyed as soon as reasonably practicable, and no individual may be identified in any actuarial, research, accreditation or auditing report.

610.70(5)(L) (L) Is made to the insurer’s legal representative for purposes of claims review or legal advice or defense.

610.70(6) (6) Immunity.

610.70(6)(a) (a) A person is not liable to any person for any of the following:

610.70(6)(a)1. 1. Disclosing personal medical information in accordance with this section.

610.70(6)(a)2. 2. Furnishing personal medical information to an insurer or insurance support organization in accordance with this section.

610.70(6)(b) (b) Paragraph (a) does not apply to the disclosure or furnishing of false information with malice or intent to injure any person.

610.70(7) (7) Obtaining information under false pretenses.

610.70(7)(a) (a) Any person who knowingly and willfully obtains information about an individual from an insurer or insurance support organization under false pretenses may be fined not more than $25,000 or imprisoned for not more than 9 months or both.

610.70(7)(b) (b) Any person who knowingly and willfully obtains information about an individual from an insurer or insurance support organization under false pretenses shall be liable to the individual for actual damages to that individual, exemplary damages of not more than $25,000 and costs and reasonable actual attorney fees.

610.70 History History: 1997 a. 231; 1999 a. 9, 79; 2005 a. 22; 2007 a. 20 s. 9121 (6) (a); 2011 a. 32.

610.70 Cross-reference Cross-reference: See also ch. Ins 25, Wis. adm. code.

610.80 610.80 Corporate governance annual disclosure.

610.80(1) (1) Definitions. In this section:

610.80(1)(a) (a) “Insurance holding company system” has the meaning given in s. 622.03 (2).

610.80(1)(b) (b) “Insurer” has the meaning given in s. 622.03 (3).

610.80(1)(c) (c) “Lead state” has the meaning given in s. 622.03 (4).

610.80(2) (2) Disclosure requirement.

610.80(2)(a) (a) An insurer or insurance holding company system of which an insurer is a member shall, annually no later than June 1, submit to the commissioner a corporate governance annual disclosure that contains the information described in sub. (3). If the insurer is a member of an insurance holding company system, the insurance holding company system shall submit the disclosure to the commissioner of the lead state in accordance with the laws of the lead state. Upon the commissioner’s request, the insurer shall provide a copy of the disclosure when this state is not the lead state.

610.80(2)(b) (b) The commissioner may request additional information from an insurer or insurance holding company system that the commissioner determines is necessary for the commissioner to understand an insurer’s or insurer member of an insurance holding company system’s corporate governance policies and the reporting or information system or controls implementing the policies.

610.80(2)(c) (c) With respect to an insurer member of an insurance holding company system, if the commissioner wishes to review the disclosure under par. (a) or make a request for additional information about the disclosure under par. (a), the commissioner shall request the disclosure or additional information through the lead state before seeking the information from the insurer member of the insurance holding company system.

610.80(2)(d) (d) The insurer or insurance holding company system has discretion over responses to inquiries regarding the disclosure under this section, provided that the disclosure is consistent with rules established by the commissioner regarding the disclosure and contains the material information necessary to permit the commissioner to gain an understanding of the insurer’s or insurer member of an insurance holding company system’s corporate governance structure, policies, and practices.

610.80(2)(e) (e) Insurers providing information substantially similar to the information required by this section in other documents provided to the commissioner, including proxy statements or other state or federal filings provided to the commissioner, are not required to also provide that information in the corporate governance annual disclosure but are required to reference in the corporate governance annual disclosure the document in which the information is included.

610.80(3) (3) Contents of disclosure. The disclosure under sub. (2) (a) shall include all of the following:

610.80(3)(a) (a) The signature of the chief executive officer or corporate secretary of the insurer or insurance holding company system attesting that, to the best of that individual’s knowledge, the insurer has implemented the corporate governance practices described in the disclosure and that a copy of the disclosure was provided to the insurer’s board of directors or an appropriate committee of the insurer’s board of directors.

610.80(3)(b) (b) An explanation of the level of corporate governance at which the disclosure provides its reporting, the criteria used to determine the level of reporting, and, if applicable, any change in the level of reporting from the previous disclosure. The insurer or insurance holding company system may provide information regarding corporate governance at the ultimate controlling parent, intermediate holding company, or individual legal entity level, depending upon how the insurer or insurance holding company system has structured its corporate governance. In determining at which level of reporting an insurer or insurance holding company system will make its disclosure, the insurer or insurance holding company system shall consider at which level the insurer or insurance holding company system does each of the following:

610.80(3)(b)1. 1. Determines risk appetite.

610.80(3)(b)2. 2. Collectively oversees earnings, capital, liquidity, operations, and reputation.

610.80(3)(b)3. 3. Coordinates and exercises supervision over earnings, capital, liquidity, operations, and reputation.

610.80(3)(b)4. 4. Places liability for failure to perform corporate governance duties.

610.80(4) (4) Confidentiality.

610.80(4)(a) (a) All of the following apply to documents, materials, and other information in the possession or control of the commissioner that are obtained by, created by, or disclosed to the commissioner or any other person under this section:

610.80(4)(a)1. 1. The documents, materials, and other information are considered proprietary and contain trade secrets.

610.80(4)(a)2. 2. The documents, materials, and other information are confidential and privileged.

610.80(4)(a)3. 3. The documents, materials, and other information are not open to inspection or copying under s. 19.35 (1).

610.80(4)(a)4. 4. The documents, materials, and other information are not subject to subpoena or discovery and are not admissible as evidence in a civil action.

610.80(4)(a)5. 5. The commissioner may use the documents, materials, and other information in the furtherance of any regulatory or legal action brought as a part of the commissioner’s official duties.

610.80(4)(a)6. 6. The commissioner may not make the documents, materials, or other information public without first obtaining written consent of the insurer.

610.80(4)(b) (b) Neither the commissioner nor any person who received documents, materials, or other information related to the corporate governance annual disclosure required under this section may testify or be required to testify in any private civil action regarding documents, materials, or other information related to the corporate governance annual disclosure required under this section.

610.80(4)(c) (c) Notwithstanding par. (a), the commissioner may share, upon request, documents, materials, or other information related to the corporate governance annual disclosure required under this section with other state, federal, and international financial regulatory agencies if the recipient agrees in writing to maintain the confidentiality and privileged status of the documents, materials, or other information and has verified that it has the legal authority to maintain confidentiality. The commissioner may receive documents, materials, or other information related to similar corporate governance disclosures from other state, federal, and international financial regulatory agencies and shall maintain as confidential or privileged any documents, materials, or other information that is treated as confidential or privileged under the laws of the jurisdiction that is the source of the documents, materials, or other information. The sharing of documents under this paragraph does not constitute a delegation of regulatory authority and does not act as a waiver of privilege.

610.80(4)(d) (d) Notwithstanding par. (a), the commissioner may share documents, materials, or other information related to the corporate governance annual disclosure required under this section with 3rd-party contractors and the National Association of Insurance Commissioners if the contractor or the National Association of Insurance Commissioners enters into an agreement with the commissioner that provides for all of the following:

610.80(4)(d)1. 1. Procedures and protocols for maintaining the confidentiality and security of documents, materials, and other information shared under this section.

610.80(4)(d)2. 2. Procedures for sharing by the National Association of Insurance Commissioners only with other state regulators in which the insurance group has domiciled insurers and who receive the information confidentially. The agreement shall provide that the recipient agrees in writing to maintain the confidentiality and privileged status of the documents, materials, or other information related to the corporate governance annual disclosure required to be filed under this section and has verified in writing the legal authority to maintain confidentiality.

610.80(4)(d)3. 3. A provision specifying that the ownership of documents, materials, or other information shared under this section remains with the commissioner and the use of the information is at the direction of the commissioner.

610.80(4)(d)4. 4. A provision that prohibits the National Association of Insurance Commissioners or 3rd-party contractor from storing information shared under this paragraph in a permanent database after the underlying analysis is complete.

610.80(4)(d)5. 5. A provision requiring the National Association of Insurance Commissioners or 3rd-party contractor to provide prompt notice to the commissioner and to the insurer regarding any subpoena, request for disclosure, or request for production of information shared under this paragraph.

610.80(4)(d)6. 6. A requirement that the National Association of Insurance Commissioners or the 3rd-party contractor consent to intervention by an insurer in any judicial or administrative action in which the National Association of Insurance Commissioners or the 3rd-party contractor may be required to disclose confidential information about the insurer shared under this paragraph.

610.80(5) (5) Consultants. The commissioner may retain, at the insurer’s or insurer member of an insurance holding company system’s expense, consultants that the commissioner determines are necessary to assist the commissioner in reviewing documents, materials, or other information submitted under this section.

610.80(6) (6) Construction. This section may not be read to prescribe or impose any standards or procedures with respect to corporate governance.

610.80(7) (7) Rule making. The commissioner may promulgate any rules necessary to carry out the purposes of this section.

610.80(8) (8) Initial filing deadline. An insurer, or the insurance holding company system of which the insurer is a member, that is required to file a corporate governance annual disclosure under this section shall file its first corporate governance annual disclosure no later than the first June 1 that occurs after the date the final rules implementing this section are promulgated.

610.80 History History: 2017 a. 313; 2019 a. 66.