Source: https://app.leg.wa.gov/wac/default.aspx?cite=284-04&full=true
Timestamp: 2019-09-23 11:51:26
Document Index: 189373888

Matched Legal Cases: ['§ 284', '§ 284', '§ 284', '§ 284', '§ 284', '§ 284', '§ 284', 'arts 160', '§ 284', '§ 284', '§ 284', '§ 284']

Chapter 284-04 WAC:
284-04-120 Definitions.
284-04-200 Initial privacy notice to consumers required.
284-04-205 Annual privacy notice to customers required.
284-04-210 Information to be included in privacy notices.
284-04-215 Form of opt out notice to consumers and opt out methods.
284-04-220 Revised privacy notices.
284-04-225 Delivery.
284-04-300 Limits on disclosure of nonpublic personal financial information to nonaffiliated third parties.
284-04-305 Limits on redisclosure and reuse of nonpublic personal financial information.
284-04-310 Limits on sharing account number information for marketing purposes.
284-04-400 Exception to opt out requirements for disclosure of nonpublic personal financial information for service providers and joint marketing.
284-04-405 Exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information for processing and servicing transactions.
284-04-410 Other exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information.
284-04-500 Health information privacy policies and procedures.
284-04-505 Nonpublic personal health information—When authorization required.
284-04-510 Right to limit disclosure of health information.
284-04-515 Authorizations.
284-04-520 Authorization request delivery.
284-04-525 Relationship to state and federal laws.
284-04-600 Protection of Fair Credit Reporting Act.
284-04-605 Nondiscrimination.
284-04-610 Violation.
284-04-615 Severability.
284-04-620 Effective date; transition rule.
284-04-625 Security breach notification requirements.
284-04-900 Sample clauses.
284-04-910 Appendix B—Federal Model Privacy Form.
284-04-120
284-04-200
284-04-205
284-04-210
284-04-215
(1) General rule. Except as otherwise authorized in this regulation, a licensee shall not, directly or through an affiliate, disclose any nonpublic personal financial information about a consumer to a nonaffiliated third party other than as described in the initial notice that the licensee provided to that consumer under WAC 284-04-200, unless:
(a) Except as otherwise permitted by WAC 284-04-400, 284-04-405, and 284-04-410, a licensee shall provide a revised notice before it:
(3) Delivery. When a licensee is required to deliver a revised privacy notice by this section, the licensee shall deliver it according to WAC 284-04-225.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-220, filed 1/9/01, effective 2/9/01.]
284-04-225
284-04-305
284-04-310
284-04-400
284-04-405
284-04-410
284-04-500
284-04-505
Nonpublic personal health information—When authorization required.
(1) A licensee shall not disclose nonpublic personal health information about a consumer or customer unless an authorization is obtained from the consumer or customer whose nonpublic personal health information is sought to be disclosed.
(2) Except as provided in WAC 284-04-510, nothing in this section shall prohibit, restrict or require an authorization for the disclosure of nonpublic personal health information by a licensee for the performance of insurance functions by or on behalf of the licensee, for activities permitted under RCW 70.02.050, and for activities permitted under health privacy regulations adopted by the U.S. Department of Health and Human Services governing health information privacy.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-505, filed 1/9/01, effective 2/9/01.]
284-04-510
284-04-515
(1) A valid authorization to disclose nonpublic personal health information pursuant to this Article V shall be in written or electronic form and shall contain all of the following:
(e) Notice of the length of time for which the authorization is valid and that the consumer or customer may revoke the authorization at any time and the procedure for making such a revocation.
(2) An authorization for the purposes of this Article V shall specify a length of time for which the authorization shall remain valid, which in no event shall be for more than twenty-four months.
(3) A consumer or customer who is the subject of nonpublic personal health information may revoke an authorization provided pursuant to this Article V at any time, subject to the rights of any individual who acted in reliance on the authorization prior to notice of the revocation.
(5) Notwithstanding the provisions of this section, a licensee complying with regulations adopted by the U.S. Department of Health and Human Services governing authorization for the release of health information satisfies the provisions of this section.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-515, filed 1/9/01, effective 2/9/01.]
284-04-520
Authorization request delivery.
A request for authorization and an authorization form may be delivered to a consumer or a customer as part of an opt-out notice pursuant to WAC 284-04-225, provided that the request and the authorization form are clear and conspicuous. An authorization form is not required to be delivered to the consumer or customer or included in any other notices unless the licensee intends to disclose protected health information pursuant to WAC 284-04-500(1).
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-520, filed 1/9/01, effective 2/9/01.]
284-04-525
Relationship to state and federal laws.
In the event of a conflict between this chapter and the state or federal laws, licensees shall comply with the state and federal laws governing privacy, as such laws relate to the business of insurance, except as expressly required by this chapter.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-525, filed 1/9/01, effective 2/9/01.]
284-04-600
Nothing in this regulation shall be construed to modify, limit or supersede the operation of the Federal Fair Credit Reporting Act (15 U.S.C. 1681 et seq.), and no inference shall be drawn on the basis of the provisions of this regulation regarding whether information is transaction or experience information under section 603 of that act.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-600, filed 1/9/01, effective 2/9/01.]
284-04-605
(1) A licensee shall not discriminate against any consumer or customer because that consumer or customer has opted out from the disclosure of his or her nonpublic personal financial information pursuant to the provisions of this regulation.
(2) A licensee shall not discriminate against a consumer or customer because that consumer or customer has not granted authorization for the disclosure of his or her nonpublic personal health information pursuant to the provisions of this regulation.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-605, filed 1/9/01, effective 2/9/01.]
284-04-610
A violation of this chapter shall be deemed to be an unfair method of competition or an unfair or deceptive act and practice in this state.
[Statutory Authority: RCW 48.02.060, 48.30.010, 48.43.505, Gramm-Leach Bliley Act, Pub. L. 102-106, Sec. 501(b), Sec. 505 (B)(2), and 45 C.F.R. Parts 160 and 164 (2013). WSR 13-11-004 (Matter No. R 2012-14), § 284-04-610, filed 5/1/13, effective 6/1/13. Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-610, filed 1/9/01, effective 2/9/01.]
284-04-615
If any section or portion of a section of this regulation or the applicability thereof to any person or circumstance is held invalid by a court, the remainder of the regulation or the applicability of the provision to other persons or circumstances shall not be affected.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-615, filed 1/9/01, effective 2/9/01.]
284-04-620
284-04-625
284-04-900
284-04-910
Appendix B—Federal Model Privacy Form.
(D) For our affiliates' everyday business purposes - Information about transactions and experiences. This reason incorporates sharing information specified in sections 603 (d)(2)(A)(i) and (ii) of the FCRA. A licensee that shares information for this reason may choose to provide an opt-out.
(E) For our affiliates' everyday business purposes - Information about creditworthiness. This reason incorporates sharing information pursuant to section 603 (d)(2)(A)(iii) of the FCRA. A licensee that shares information for this reason must provide an opt-out.
[Statutory Authority: RCW 48.02.060, 48.43.505, Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2), and Financial Services Regulatory Relief Act of 2006, Public Law 109-351, sec. 728. WSR 17-20-113, § 284-04-910, filed 10/4/17, effective 11/4/17.]