Source: http://www.tdi.texas.gov/rules/2001/emprivrule.html
Timestamp: 2018-03-23 05:20:49
Document Index: 85872631

Matched Legal Cases: ['§22', '§22', '§6801', 'Art. 28', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§36', '§2004', '§2004', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22', '§22']

SUBCHAPTER A. Insurance Consumer
1. INTRODUCTION. The Commissioner of Insurance adopts on an emergency basis, to take immediate effect, new §§22.1-22.26, which set forth procedures that insurers and other covered entities regulated by the Texas Department of Insurance must follow regarding privacy of their consumers' nonpublic personal financial information. Emergency §§22.1-22.26 set forth the requirements that insurers and other covered entities must meet in structuring their consumer financial practices to comply with the federal Gramm-Leach-Bliley Act (GLBA), 15 U.S.C §6801 et seq. Specifically, the rules provide the notice requirements, as well as other procedures that insurers and other covered entities must follow with regard to nonpublic personal financial information collected about a consumer.
Pursuant to the Administrative Procedure Act, Texas Government Code Sec. 2001.034, the Commissioner finds that a requirement of federal or state law requires adoption of this rule on fewer than 30 days' notice. Senate Bill 712 (SB 712), 77 th Texas Legislature, which enacted Insurance Code Art. 28A.01 et seq., requires covered entities (and certain of their affiliates) to comply with consumer privacy provisions contained in GLBA. SB 712 also requires the Commissioner to adopt rules necessary to implement financial privacy requirements, and also to adopt any other rules necessary to carry out the purposes of GLBA, to make the state of Texas eligible to override federal regulations, as described by Title V of GLBA. SB 712 further provides that in adopting these rules, the Commissioner shall attempt to keep state privacy regulations consistent with federal regulations adopted under GLBA. The Senate Bill Analysis, in pertinent part, states that "Senate Bill 712 requires insurers and other entities regulated by the Texas Department of Insurance to comply with requirements of GLBA and requires the commissioner of insurance to adopt rules consistent with GLBA based on the NAIC [National Association of Insurance Commissioners] privacy model." The proposed sections, while based on the NAIC model rule, have been clarified in certain sections for greater ease in reading. SB 712 also requires that the Commissioner adopt rules to implement financial information privacy protections not later than 30 days after the law's effective date, June 14, 2001. Finally, SB 712 provides that the Commissioner may adopt these rules on an emergency basis. The statutory scheme of federal and state regulation makes emergency adoption important to provide timely protection of consumer financial information privacy, consistent with other types of financial entities that are subject to the federal privacy provisions of GLBA.
New §22.1 explains the purpose and scope of the subchapter. New §22.2 defines terms within the subchapter. New §22.3 describes exceptions to applicability of the subchapter. New §22.4 describes the procedure for determining whether an individual is a consumer. New §22.5 details the method of determining whether a relationship is continuing. New §22.6 states the requirements for notices. New §22.7 defines a reasonable basis to believe information is lawfully made available to the general public. New §22.8 outlines requirements for initial privacy notices to consumers. New §22.9 outlines requirements for annual privacy notices to customers. New §22.10 details information to be included in privacy notices. New §22.11 prescribes requirements for the form of notice and methods for opting out. New §22.12 details provisions regarding revised privacy notices. New §22.13 describes permissible delivery of notices. New §22.14 establishes limits on disclosure of nonpublic personal financial information to nonaffiliated third parties. New §22.15 describes limits on redisclosure and reuse of nonpublic personal financial information. New §22.16 limits the sharing of account number information for marketing purposes. New §22.17 creates an exception to opt out requirements for disclosure of nonpublic personal financial information for service providers and joint marketing. New §22.18 describes exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information for processing and service transactions. New §22.19 lists other exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information. New §22.20 provides that the subchapter shall not affect the operation of the federal Fair Credit Reporting Act. New §22.21 prohibits discrimination against consumers or customers because of the exercise of rights under the subchapter. New §22.22 deems a violation of the subchapter to be an unfair method of competition or an unfair or deceptive act or practice. New §22.23 provides for severability of any section of the subchapter held invalid. New §22.24 establishes a compliance date for the subchapter. New §22.25 provides that the subchapter does not preempt or supersede existing state law related to financial information privacy. New §22.26 includes forms for use in compliance with the subchapter.
The department is simultaneously proposing adoption of this rule on a permanent basis in a separate submission.
2. STATUTORY AUTHORITY. The new sections are adopted on an emergency basis under the Insurance Code, Article 28A.51 and §36.001, and Government Code §2004.034. Article 28A.51 provides that the Commissioner shall adopt rules to implement this chapter, as well as any other rules necessary to carry out 15 U.S.C. Subchapter I, Chapter 94 (15 U.S.C. Section 6801 et seq.), as amended. Section 36.001 provides that the Commissioner of Insurance may adopt rules and regulations to execute the duties and functions of the Texas Department of Insurance only as authorized by statute. Section 2, SB 712, 77 th Texas Legislature, the legislation enacting Insurance Code Article 28A.51, requires that not later than 30 days after the effective date of the act, the Commissioner of Insurance shall adopt the rules required by Article 28A.51, Insurance Code, and allows the Commissioner to adopt these initial rules on an emergency basis. Government Code §2004.034 provides for the adoption of administrative rules on an emergency basis without notice and comment.
(2) describes the conditions under which a covered entity may disclose nonpublic personal financial information about individuals to affiliates and nonaffiliated third parties; and
(8) Consumer--An individual or that individual's representative who seeks to obtain, obtains or has obtained an insurance product or service from a covered entity that is to be used primarily for personal, family or household purposes, and about whom the covered entity has nonpublic personal financial information. For purposes of this subchapter, all references to consumer include the term customer, unless the purpose of the reference is to make a distinction between applicability of the subchapter to a customer and a consumer.
(15) Financial product or service--Any product or service that a financial holding company could offer by engaging in an activity that is financial in nature or incidental to such a financial activity under Section 4(k) of the Bank Holding Company Act of 1956 (12 U.S.C. 1843(k)). Financial service includes a financial institution's evaluation or brokerage of information that the financial institution collects in connection with a request or an application from a consumer for a financial product or service.
(18) Health information--Any information or data except age or gender, whether oral or recorded in any form or medium, created by or derived from a health care provider or the consumer that relates to:
(II) is wholly derived using personally identifiable financial information that is publicly available, and
(v) the fact that an individual is or has been one of the covered entity's customers or has obtained an insurance product or service from the covered entity;
(vi) any information about the covered entity's consumer if it is disclosed in a manner that indicates that the individual is or has been the covered entity's consumer;
(2) the person delivers to the consumer at the time a customer relationship is established Form Number FNPRV DSC/SRPLN provided at Figure 8 of §22.26(b)(8) of this title (relating to Forms), in at least 16 point type.
(1) an individual who is a consumer of another financial institution is not a covered entity's consumer solely because the covered entity is acting as agent for, or provides processing or other services to, that financial institution.
(2) an individual is not a covered entity's consumer solely because he or she is a beneficiary of a trust for which the covered entity is a trustee.
(3) an individual is not a covered entity's consumer solely because he or she has designated the covered entity as trustee for a trust.
(c) Special rules for employee benefit plans, group or blanket insurance policies, group annuity contracts, or workers' compensation policies.
(3) An individual that is a beneficiary of a workers' compensation policy issued by a covered entity is not the consumer of a covered entity that:
§22.5. Determination of Continuing Relationship.
(a) A consumer has a continuing relationship with a covered entity if:
(b) A consumer does not have a continuing relationship with a covered entity if:
(6) the customer's policy is lapsed, expired, or otherwise not in force, and the covered entity has not communicated with the customer about the relationship for a period of 12 consecutive months, other than annual privacy notices, material required by law or regulation, communication at the direction of a state or federal authority, or promotional materials;
(8) the individual's last known address according to the covered entity's records is deemed invalid, which occurs when:
§22.6. Notice Requirements.
(a) Any notice required by this subchapter must comply with the following standards.
(C) if an option as described in paragraph (1)(B) of this section is available, that the covered entity's consumer has not made such a direction.
(2) The following examples illustrate whether a reasonable basis exists to believe that information is publically available.
(D) A covered entity has a reasonable basis to believe that an individual's telephone number is lawfully made available to the general public if the covered entity has located the telephone number in the telephone book or the consumer has informed the covered entity that the telephone number is not unlisted.
(1) an individual who becomes the covered entity's customer, not later than when the covered entity establishes a customer relationship, except as provided in subsection (e) of this section; and
(1) the covered entity does not disclose any nonpublic personal financial information about the consumer to any nonaffiliated third party, other than as authorized by §§22.18 and 22.19 of this title, and the covered entity does not have a customer relationship with the consumer; or
(2) a notice has been provided by an affiliated covered entity, so as long as the notice clearly identifies all covered entities to whom the notice applies and is accurate with respect to the covered entity and the other institutions.
(d) Existing customers. When an existing customer obtains a new insurance product or service from a covered entity that is to be used primarily for personal, family or household purposes, if the initial, revised or annual notice that the covered entity most recently provided to that customer was inaccurate with respect to the new insurance product or service, the covered entity shall, in accordance with the initial notice requirements of subsection (a) of this section, provide a revised privacy notice, under §22.12 of this title (relating to Revised Privacy Notices), that covers the customer's new insurance product or service. If the initial, revised or annual notice that the covered entity most recently provided to that customer was accurate with respect to the new insurance product or service, the covered entity does not need to provide a new privacy notice under subsection (a) of this section.
(A) establishing the customer relationship is not at the customer's election; or
(B) providing notice not later than when the covered entity establishes a customer relationship would substantially delay the customer's transaction and the customer agrees to receive the notice at a later time.
(2) Not at customer's election. Establishing a customer relationship is not at the customer's election if a covered entity acquires or is assigned a customer's policy from another financial institution or residual market mechanism and the customer does not have a choice about the covered entity's acquisition or assignment.
(3) Substantial delay of customer's transaction. Providing notice not later than when a covered entity establishes a customer relationship would substantially delay the customer's transaction when the covered entity and the individual agree over the telephone to enter into a customer relationship involving prompt delivery of the insurance product or service.
(4) No substantial delay of customer's transaction. Providing notice not later than when a covered entity establishes a customer relationship would not substantially delay the customer's transaction when the relationship is initiated in person at the covered entity's office or through other means by which the customer may view the notice, such as on a Web site.
(a) A covered entity shall provide a clear and conspicuous notice to customers that accurately reflects its privacy policies and practices not less than annually during the continuation of the customer relationship. "Annually" means at least once in any period of 12 consecutive months during which that relationship exists. A covered entity may define the 12-consecutive-month period, but the covered entity shall apply it to the customer on a consistent basis. A covered entity provides a notice annually if it defines the twelve-consecutive-month period as a calendar year and provides the annual notice to the customer once in each calendar year following the calendar year in which the covered entity provided the initial notice. For example, if a customer opens an account on any day of year 1, the covered entity shall provide an annual notice to that customer by December 31 of year 2.
(2) A covered entity no longer has a continuing relationship with an individual if the individual's policy is lapsed, expired or otherwise not in force, and the covered entity has not communicated with the customer about the relationship for a period of 12 consecutive months, other than to provide annual privacy notices, material required by law or regulation, or promotional materials.
(a) Nondisclosure notice requirements. A covered entity that does not disclose, and does not reserve the right to disclose, nonpublic personal financial information about customers or former customers to affiliates or nonaffiliated third parties except as authorized under §22.18 of this title (relating to Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information for Processing and Servicing Transactions) and §22.19 of this title (relating to Other Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information), may comply with this subchapter by providing a notice which expresses:
(1) The categories of nonpublic personal financial information that the covered entity collects. A covered entity satisfies the requirement to categorize the nonpublic personal financial information it collects when the covered entity categorizes it according to the source of the information, as applicable, including :
(B) information about the consumer's transactions with the covered entity or its affiliates;
(C) information about the consumer's transactions with nonaffiliated third parties; and
(A) A covered entity satisfies the requirement to categorize nonpublic personal financial information it discloses when the covered entity categorizes the information according to source, as described in subsection (b)(1) of this section, as applicable, and provides examples to illustrate the types of information in each category, such as:
(i) information from the consumer, including application information (such as assets and income) and identifying information (such as name, address and social security number);
(iii) information from consumer reports (such as a consumer's creditworthiness and credit history).
(4) The categories of nonpublic personal financial information about the covered entity's former customers that the covered entity discloses and the categories of affiliates and nonaffiliated third parties to whom the covered entity discloses nonpublic personal financial information about the covered entity's former customers, other than those parties to whom the covered entity discloses information under §§22.18 and 22.19 of this title.
(5) A covered entity that discloses nonpublic personal financial information to a nonaffiliated third party under §22.17 of this title (relating to Exception to Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information for Service Providers and Joint Marketing) and no other exception in §§22.18 and 22.19 of this title applies to that disclosure, shall provide a separate description of the categories of information the covered entity discloses and the categories of third parties with whom the covered entity has contracted.
(6) An explanation of the consumer's right under §22.14(a) of this title (relating to Limits on Disclosure of Nonpublic Personal Financial Information to Nonaffiliated Third Parties) to opt out of the disclosure of nonpublic personal financial information to nonaffiliated third parties, including the methods by which the consumer may exercise that right at that time.
(8) The covered entity's policies and practices with respect to protecting the confidentiality and security of nonpublic personal financial information. A covered entity provides an adequate description of its policies and practices with respect to protecting the confidentiality and security of nonpublic personal financial information if it does both of the following:
(B) states whether the covered entity has security practices and procedures in place to ensure the confidentiality of the information in accordance with the covered entity's policy. The covered entity is not required to describe technical information about the safeguards it uses.
(A) a service provider that performs marketing services on the covered entity's behalf or on behalf of the covered entity and another financial institution; or
(B) state that the covered entity's privacy notice is available upon request; and
(3) The covered entity shall deliver its short-form initial notice according to §22.13 of this title (relating to Delivery). The covered entity is not required to deliver its privacy notice with its short-form initial notice. The covered entity instead may simply provide the consumer a reasonable means to obtain its privacy notice. If a consumer who receives the covered entity's short-form notice requests the covered entity's privacy notice, the covered entity shall deliver its privacy notice according to §22.13 of this title.
(B) for a consumer who conducts business in person at the covered entity's office, maintains copies of the notice on hand that the covered entity provides to the consumer immediately upon request.
(g) Reservation of right to disclose. The covered entity's notice may include:
(4) Form Number FNPRV INFO/TPDSC provided at Figure 4 of §22.26(b)(4) of this title is intended to meet the requirements of subsection (b)(3) of this section to describe the categories of affiliates and nonaffiliated third parties to whom the covered entity discloses nonpublic personal financial information. A covered entity may use this clause if the covered entity discloses nonpublic personal financial information other than as permitted by the exceptions in §§22.17, 22.18, and 22.19 of this title
(6) Form Number FNPRV INFO/OPT provided at Figure 6 of §22.26(b)(6) of this title is intended to meet the requirements of subsection (b)(6) of this section to provide an explanation of the consumer's right to opt out of the disclosure of nonpublic personal financial information to nonaffiliated third parties, including the method(s) by which the consumer may exercise that right. A covered entity may use this clause if the covered entity discloses nonpublic personal financial information other than as permitted by the exceptions in §§22.17, 22.18, and 22.19 of this title.
(7) Form Number FNPRV INFO/SEC provided at Figure 7 of §22.26(b)(7) of this subchapter is intended to meet the requirements of subsection (b)(8) of this section to describe the covered entity's policies and practices with respect to protecting the confidentiality and security of nonpublic personal financial information.
(3) a reasonable means by which the consumer may opt out .
(3) provides an electronic means to opt out, such as a form that can be sent via electronic mail or a process at the covered entity's Web site, if the consumer agrees to the electronic delivery of information; or
(1) If two or more consumers jointly obtain or seek to obtain an insurance product or service from a covered entity, the covered entity may provide a single opt out notice. The covered entity's opt out notice shall explain how the covered entity will treat an opt out direction by a joint consumer (as explained in subsection (i) of this section).
(i) The following are examples of how a covered entity should treat a joint relationship. If John and Mary are both named policyholders on a homeowner's insurance policy issued by a covered entity and the covered entity sends policy statements to John's address, the covered entity may do any of the following, but it shall explain in its opt out notice which opt out policy the covered entity will follow:
(1) send a single opt out notice to John's address, but the covered entity shall accept an opt out direction from either John or Mary.
(2) treat an opt out direction by either John or Mary as applying to the entire policy. If the covered entity does so and John opts out, the covered entity may not require Mary to opt out as well before implementing John's opt out direction.
(j) A covered entity shall comply with a consumer's opt out direction as soon as reasonably practicable after the covered entity receives it.
(l) A consumer's direction to opt out under this section is effective until the consumer revokes it in writing or, if the consumer has agreed to conduct business electronically, electronically.
(m) When a customer relationship terminates, the customer's opt out direction continues to apply to the nonpublic personal financial information that the covered entity collected during or related to that relationship. If the individual subsequently establishes a new customer relationship with the covered entity, the opt out direction that applied to the former relationship does not apply to the new relationship.
(3) for a consumer who conducts transactions electronically, posts the notice on the electronic site and requires the consumer to acknowledge receipt of the notice as a necessary step to obtaining a particular insurance product or service;
(d) Annual notices only. A covered entity satisfies the reasonable expectation that a customer will receive actual notice of the covered entity's annual privacy notice if:
(1) the customer uses the covered entity's Web site to access insurance products and services electronically and agrees to receive notices at the Web site and the covered entity posts its current privacy notice continuously in a clear and conspicuous manner on the Web site; or
(2) the customer has requested that the covered entity refrain from sending any information regarding the customer relationship, and the covered entity's current privacy notice remains available to the customer upon request.
(a) If a covered entity receives nonpublic personal financial information from a nonaffiliated financial institution under an exception in §22.18 of this title (relating to Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information for Processing and Servicing Transactions) and §22.19 of this title (relating to Other Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information), the covered entity's disclosure and use of that information is limited as follows:
(2) the covered entity may disclose the information to its affiliates, but the covered entity's affiliates may, in turn, disclose and use the information only to the extent that the covered entity may disclose and use the information; and
(3) the covered entity may disclose and use the information pursuant to an exception in §§22.18 and 22.19 of this title in the ordinary course of business to carry out the activity covered by the exception under which the covered entity received the information.
(c) If a covered entity receives nonpublic personal financial information from a nonaffiliated financial institution other than under an exception in §§22.18 and 22.19 of this title, the covered entity may disclose the information only:
(d) If a covered entity obtains a customer list from a nonaffiliated financial institution outside of the exceptions in §§22.18 and 22.19 of this title:
(2) the covered entity may disclose that list to another nonaffiliated third party only if the financial institution from which the covered entity purchased the list could have lawfully disclosed the list to that third party. That is, the covered entity may disclose the list in accordance with the privacy policy of the financial institution from which the covered entity received the list, as limited by the opt out direction of each consumer whose nonpublic personal financial information the covered entity intends to disclose, and the covered entity may disclose the list in accordance with an exception in §§22.18 and 22.19 of this title, such as to the covered entity's attorneys or accountants.
(e) If a covered entity discloses nonpublic personal financial information to a nonaffiliated third party under an exception in §§22.18 and 22.19 of this title, the third party may disclose and use that information only as follows:
(1) the third party may disclose the information to the covered entity's affiliates;
(3) the third party may disclose and use the information pursuant to an exception in §§22.18 or 22.19 of this title in the ordinary course of business to carry out the activity covered by the exception under which it received the information.
(f) If a covered entity discloses nonpublic personal financial information to a nonaffiliated third party other than under an exception in §§22.18 and 22.19 of this title, the third party may disclose the information only:
(1) to the covered entity's affiliates;
(a) A covered entity shall not, directly or through an affiliate, disclose, other than to a consumer reporting agency, a policy number or similar form of access number or access code for a consumer's policy or transaction account to any nonaffiliated third party for use in telemarketing, direct mail marketing or other marketing through electronic mail to the consumer.
(1) to another covered entity solely for the purpose of marketing the sharing covered entity's own products or services, so long as the receiving covered entity is not authorized to directly initiate charges to the account; or
(a) The opt out requirements in §22.11 of this title (relating to Form of Opt Out Notice to Consumers and Opt Out Methods) and §22.14 of this title (relating to Limits on Disclosure of Nonpublic Personal Financial Information to Nonaffiliated Third Parties) do not apply when a covered entity provides nonpublic personal financial information to a nonaffiliated third party to perform services for the covered entity or functions on the covered entity's behalf, if the covered entity:
(b) If a covered entity discloses nonpublic personal financial information under this section to a financial institution with which the covered entity performs joint marketing, the covered entity's contractual agreement with that institution meets the requirements of subsection (a)(2) of this section if it prohibits the institution from disclosing or using the nonpublic personal financial information except as necessary to carry out the joint marketing or under an exception set forth in §§22.18 and 22.19 of this title in the ordinary course of business to carry out that joint marketing.
(c) The services a nonaffiliated third party performs for a covered entity under subsection (a) of this section may include marketing of the covered entity's own products or services or marketing of financial products or services offered pursuant to joint agreements between the covered entity and one or more financial institutions.
(2) maintaining or servicing the consumer's account with a covered entity, or with another entity as part of a private label credit card program or other extension of credit on behalf of such entity;
(1) required, or is one of the lawful or appropriate methods, to enforce the covered entity's rights or the rights of other persons engaged in carrying out the financial transaction or providing the product or service; or
(A) to carry out the transaction or the product or service business of which the transaction is a part, and record, service or maintain the consumer's account in the ordinary course of providing the insurance product or service;
(C) to provide a confirmation, statement or other record of the transaction, or information on the status or value of the insurance product or service to the consumer or the consumer's agent or broker;
(E) to underwrite insurance at the consumer's request or for any of the following purposes as they relate to a consumer's insurance: account administration, reporting, investigating or preventing fraud or material misrepresentation, processing premium payments, processing insurance claims, administering insurance benefits (including utilization review activities), participating in research projects or as otherwise required or specifically permitted by federal or state law; or
(2) to protect the confidentiality or security of a covered entity's records pertaining to the consumer, service, product or transaction;
(7) to provide information to insurance rate advisory organizations, guaranty funds or agencies, agencies that are rating a covered entity, persons that are assessing the covered entity's compliance with industry standards, and the covered entity's attorneys, accountants and auditors;
(14) for purposes related to the replacement of a group benefit plan, a group health plan, a group welfare plan or a workers' compensation policy.
(a) A violation of any section of this subchapter shall subject the covered entity to the penalties provided in the Insurance Code, Chapters 82 & 84, and other applicable provisions of the Insurance Code.
(b) In addition to and cumulative of the penalties provided in subsection (a) of this section, a violation of any section of this subchapter shall be considered to be an unfair method of competition or an unfair or deceptive practice and shall subject the covered entity to the penalties provided in the Insurance Code, Article 21.21, and other applicable provisions of the Insurance Code.
(b) By September 10, 2001, a covered entity shall provide an initial notice, as required by §22.8 of this title (relating to Initial Privacy Notice), to consumers who are the covered entity's customers on September 10, 2001. For example, a covered entity provides an initial notice to consumers who are its customers on September 10, 2001, if, by that date, the covered entity has established a system for providing an initial notice to all new customers and has mailed the initial notice to all the covered entity's existing customers.
(c) Until September 10, 2002, a contract that a covered entity has entered into with a nonaffiliated third party to perform services for the covered entity or functions on the covered entity's behalf satisfies the provisions of §22.17(a)(1)(B) of this title (relating to Exception to Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information for Service Providers and Joint Marketing), even if the contract does not include a requirement that the third party maintain the confidentiality of nonpublic personal financial information, so long as the covered entity entered into the agreement on or before September 10, 2000.
CERTIFICATION. This agency certifies that the sections as adopted have been reviewed by legal counsel and found to be a valid exercise of the agency's legal authority.
Issued at Austin, Texas, on July 12, 2001.
IT IS THEREFORE THE ORDER of the Commissioner of Insurance new §§22.1-22.26, concerning Insurance Consumer Financial Information Privacy, are adopted on emergency basis.
COMMISSIONER'S ORDER NO.01-0647