Chapter Ins 25

Ins 25.04(13) (13) “Health care” means any of the following:

Ins 25.04(13)(a) (a) Preventive, diagnostic, therapeutic, rehabilitative, maintenance or palliative care, services, procedures, tests or counseling that involves any of the following:

Ins 25.04(13)(a)1. 1. It relates to the physical, mental or behavioral condition of an individual.

Ins 25.04(13)(a)2. 2. It affects the structure or function of the human body or any part of the human body, including the banking of blood, sperm, organs or any other tissue.

Ins 25.04(13)(b) (b) Prescribing, dispensing or furnishing to an individual drugs or biologicals, or medical devices or health care equipment and supplies.

Ins 25.04(14) (14) “Health care provider” means a physician or other health care practitioner licensed, accredited or certified to perform specified health services consistent with state law, or a health care facility.

Ins 25.04(15) (15) “Health information” means any information or data except age or gender, whether oral or recorded in any form or medium, created by or derived from a health care provider or the consumer that relates to any of the following:

Ins 25.04(15)(a) (a) The past, present or future physical, mental or behavioral health or condition of an individual.

Ins 25.04(15)(b) (b) The provision of health care to an individual.

Ins 25.04(15)(c) (c) Payment for the provision of health care to an individual.

Ins 25.04(16) (16) 

Ins 25.04(16)(a) (a) “Insurance product or service” means any product or service that is offered by a licensee pursuant to the insurance laws of this state.

Ins 25.04(16)(b) (b) Insurance service includes a licensee’s evaluation, brokerage or distribution of information that the licensee collects in connection with a request or an application from a consumer for an insurance product or service.

Ins 25.04(17) (17) 

Ins 25.04(17)(a) (a) “Licensee” means all insurers, intermediaries, third party administrators and other persons licensed or required to be licensed, or authorized or required to be authorized, or registered or required to be registered under chs. 600 to 655, Stats.

Ins 25.04(17)(b) (b) A licensee is not subject to the notice and opt out requirements for nonpublic personal financial information set forth in subchs. I to IV if the licensee is an employee, agent or other representative of another licensee (“the principal”) and all of the following conditions exist:

Ins 25.04(17)(b)1. 1. The principal otherwise complies with, and provides the notices required by, the provisions of this chapter.

Ins 25.04(17)(b)2. 2. The licensee does not disclose any nonpublic personal financial information to any person other than the principal or its affiliates in a manner permitted by this chapter.

Ins 25.04(17)(c) (c)

Ins 25.04(17)(c)1. 1. Subject to subd. 2., “licensee” also includes an unauthorized insurer that accepts business placed through a licensed surplus lines broker or agent in this state, but only in regard to placements placed pursuant to s. 618.41, Stats.

Ins 25.04(17)(c)2. 2. A surplus lines broker or agent or surplus lines insurer shall be deemed to be in compliance with the notice and opt out requirements for nonpublic personal financial information set forth in subchs. I to IV provided all of the following occur:

Ins 25.04(17)(c)2.a. a. The broker, agent or insurer does not disclose nonpublic personal financial information of a consumer or a customer to nonaffiliated third parties for any purpose, including joint servicing or marketing under s. Ins 25.50, except as permitted by s. Ins 25.55 or 25.60.

Ins 25.04(17)(c)2.b. b. The broker, agent or insurer delivers a notice to the consumer at the time a customer relationship is established on which the following is printed in 16-point type:

PRIVACY NOTICE

NEITHER THE U.S. BROKERS THAT HANDLED THIS INSURANCE NOR THE INSURERS THAT HAVE UNDERWRITTEN THIS INSURANCE WILL DISCLOSE NONPUBLIC PERSONAL FINANCIAL INFORMATION CONCERNING THE BUYER TO NONAFFILIATES OF THE BROKERS OR INSURERS EXCEPT AS PERMITTED BY LAW.

Ins 25.04(18) (18) 

Ins 25.04(18)(a) (a) “Nonaffiliated third party” means any person except any of the following:

Ins 25.04(18)(a)1. 1. A licensee’s affiliate.

Ins 25.04(18)(a)2. 2. A person employed jointly by a licensee and any company that is not the licensee’s affiliate. Under these circumstances “nonaffiliated third party” does include the other company that jointly employs the person.

Ins 25.04(18)(b) (b) “Nonaffiliated third party” includes any company that is an affiliate solely by virtue of the direct or indirect ownership or control of the company by the licensee or its affiliate in conducting merchant banking or investment banking activities of the type described in Section 4(k)(4)(H) or insurance company investment activities of the type described in Section 4(k)(4)(I) of the federal Bank Holding Company Act (12 USC 1843(k)(4)(H) and (I)).

Ins 25.04(19) (19) “Nonpublic personal information” means nonpublic personal financial information and nonpublic personal health information.

Ins 25.04(20) (20) 

Ins 25.04(20)(a) (a) “Nonpublic personal financial information” means all of the following:

Ins 25.04(20)(a)1. 1. Personally identifiable financial information.

Ins 25.04(20)(a)2. 2. Any list, description or other grouping of consumers, and publicly available information pertaining to them, that is derived using any personally identifiable financial information that is not publicly available.

Ins 25.04(20)(b) (b) Nonpublic personal financial information does not include any of the following:

Ins 25.04(20)(b)1. 1. Health information.

Ins 25.04(20)(b)2. 2. Publicly available information, except as included on a list described in par. (a) 2.

Ins 25.04(20)(b)3. 3. Any list, description or other grouping of consumers, and publicly available information pertaining to them, that is derived without using any personally identifiable financial information that is not publicly available.

Ins 25.04(20)(c) (c)

Ins 25.04(20)(c)1. 1. Nonpublic personal financial information includes any list of individuals’ names and street addresses that is derived in whole or in part using personally identifiable financial information that is not publicly available, such as account numbers.

Ins 25.04(20)(c)2. 2. Nonpublic personal financial information does not include any list of individuals’ names and addresses that contains only publicly available information, is not derived in whole or in part using personally identifiable financial information that is not publicly available, and is not disclosed in a manner that indicates that any of the individuals on the list is a consumer of a financial institution.

Ins 25.04(21) (21) “Nonpublic personal health information” means any of the following health information:

Ins 25.04(21)(a) (a) Health information that identifies an individual who is the subject of the information.

Ins 25.04(21)(b) (b) Health information with respect to which there is a reasonable basis to believe that the information could be used to identify an individual.

Ins 25.04(22) (22) 

Ins 25.04(22)(a) (a) “Personally identifiable financial information” means any of the following information:

Ins 25.04(22)(a)1. 1. Information a consumer provides to a licensee to obtain an insurance product or service from the licensee.

Ins 25.04(22)(a)2. 2. Information about a consumer resulting from a transaction involving an insurance product or service between a licensee and a consumer.

Ins 25.04(22)(a)3. 3. Information the licensee otherwise obtains about a consumer in connection with providing an insurance product or service to that consumer.

Ins 25.04(22)(b) (b) The following are examples of personally identifiable financial information:

Ins 25.04(22)(b)1. 1. Personally identifiable financial information includes any of the following:

Ins 25.04(22)(b)1.a. a. Information a consumer provides to a licensee on an application to obtain an insurance product or service.

Ins 25.04(22)(b)1.b. b. Account balance information and payment history.

Ins 25.04(22)(b)1.c. c. The fact that an individual is or has been one of the licensee’s customers or has obtained an insurance product or service from the licensee.

Ins 25.04(22)(b)1.d. d. Any information about the licensee’s consumer if it is disclosed in a manner that indicates that the individual is or has been the licensee’s consumer.

Ins 25.04(22)(b)1.e. e. Any information that a consumer provides to a licensee or that the licensee or its agent otherwise obtains in connection with collecting on a loan or servicing a loan.

Ins 25.04(22)(b)1.f. f. Any information the licensee collects through an internet information-collecting device from a web server.

Ins 25.04(22)(b)1.g. g. Information from a consumer report.

Ins 25.04(22)(b)2. 2. Personally identifiable financial information does not include any of the following:

Ins 25.04(22)(b)2.a. a. Health information.

Ins 25.04(22)(b)2.b. b. A list of names and addresses of customers of an entity that is not a financial institution.

Ins 25.04(22)(b)2.c. c. Information that does not identify a consumer, such as aggregate information or blind data that does not contain personal identifiers such as account numbers, names or addresses.

Ins 25.04(23) (23) 

Ins 25.04(23)(a) (a) “Publicly available information” means any information that a licensee has a reasonable basis to believe is lawfully made available to the general public from any of the following:

Ins 25.04(23)(a)1. 1. Federal, state or local government records.

Ins 25.04(23)(a)2. 2. Widely distributed media.

Ins 25.04(23)(a)3. 3. Disclosures to the general public that are required to be made by federal, state or local law.

Ins 25.04(23)(b) (b) A licensee has a reasonable basis to believe that information is lawfully made available to the general public if the licensee has taken steps to determine all of the following:

Ins 25.04(23)(b)1. 1. That the information is of the type that is available to the general public.

Ins 25.04(23)(b)2. 2. Whether an individual can direct that the information not be made available to the general public and, if so, that the licensee’s consumer has not done so.

Ins 25.04(23)(c) (c) The following are examples of publicly available information.

Ins 25.04(23)(c)1. 1. Publicly available information in government records includes information in government real estate records and security interest filings.

Ins 25.04(23)(c)2. 2. Publicly available information from widely distributed media includes information from a telephone book, a television or radio program, a newspaper or a web site that is available to the general public on an unrestricted basis. A web site is not restricted merely because an Internet service provider or a site operator requires a fee or a password, so long as access is available to the general public.

Ins 25.04(23)(c)3. 3.

Ins 25.04(23)(c)3.a. a. A licensee has a reasonable basis to believe that mortgage information is lawfully made available to the general public if the licensee has determined that the information is of the type included on the public record in the jurisdiction where the mortgage would be recorded.

Ins 25.04(23)(c)3.b. b. A licensee has a reasonable basis to believe that an individual’s telephone number is lawfully made available to the general public if the licensee has located the telephone number in the telephone book or the consumer has informed the licensee that the telephone number is not unlisted.

Ins 25.04 History History: Cr. Register, June, 2001, No. 546, eff. 7-1-01.

subch. II of ch. Ins 25 Subchapter II — Privacy and Opt-Out Notices for Financial Information

Ins 25.10 Ins 25.10 Initial privacy notice to consumers required.

Ins 25.10(1) (1) Initial notice requirement. A licensee shall provide a clear and conspicuous notice that accurately reflects its privacy policies and practices regarding nonpublic personal financial information to all of the following:

Ins 25.10(1)(a) (a) Customer. An individual who becomes the licensee’s customer, not later than when the licensee establishes a customer relationship, except as provided in sub. (5).

Ins 25.10(1)(b) (b) Consumer. A consumer, before the licensee discloses any nonpublic personal financial information about the consumer to any nonaffiliated third party, if the licensee makes a disclosure other than as authorized by ss. Ins 25.55 and 25.60.

Ins 25.10(2) (2) When initial notice to a consumer is not required. A licensee is not required to provide an initial notice to a consumer under sub. (1) (b) if any of the following conditions apply:

Ins 25.10(2)(a) (a) The licensee does not disclose any nonpublic personal financial information about the consumer to any nonaffiliated third party, other than as authorized by ss. Ins 25.55 and 25.60, and the licensee does not have a customer relationship with the consumer.

Ins 25.10(2)(b) (b) An affiliated licensee has provided a notice, as long as the notice clearly identifies all licensees to whom the notice applies and is accurate with respect to the licensee and the other institutions.

Ins 25.10(3) (3) When the licensee establishes a customer relationship.

Ins 25.10(3)(a) (a) General rule. A licensee establishes a customer relationship at the time the licensee and the consumer enter into a continuing relationship.

Ins 25.10(3)(b) (b) Examples of establishing customer relationship. A licensee establishes a customer relationship when the consumer does any of the following: