SECTION 365:35-1-2. Purpose and scope

(a)   Purpose. This regulation governs the treatment of nonpublic personal health information and nonpublic personal financial information about individuals by all licensees of the state insurance department. This regulation:

(1)   Requires a licensee to provide notice to individuals about its privacy policies and practices;

(2)   Describes the conditions under which a licensee may disclose nonpublic personal health information and nonpublic personal financial information about individuals to affiliates and nonaffiliated third parties; and

(3)   Provides methods for individuals to prevent a licensee from disclosing that information.

(b)   Scope. This regulation applies to:

(1)   Nonpublic personal financial information about individuals who obtain or are claimants or beneficiaries of products or services primarily for personal, family or household purposes from licensees. This regulation does not apply to information about companies or about individuals who obtain products or services for business, commercial or agricultural purposes;and

(2)   All nonpublic personal health information.

(3)   This regulation does not apply to workers compensation insurance.

(c)   Compliance. A licensee domiciled in this state that is in compliance with this regulation in a state that has not enacted laws or regulations that meet the requirements of Title V of the Gramm-Leach-Bliley Act (PL 106-102) may nonetheless be deemed to be in compliance with Title V of the Gramm-Leach-Bliley Act in the other state.

[Source: Added at 18 Ok Reg 3645, eff 9-7-01 (emergency); Added at 19 Ok Reg 1326, eff 7-14-02]