August 5, 2020

Volume X, Number 218

August 04, 2020

Subscribe to Latest Legal News and Analysis

August 03, 2020

Subscribe to Latest Legal News and Analysis

CCPA and IIPPA Update

Earlier this year, California legislators proposed A.B. 9811  (“the proposal”), which, among other things, would have exempted insurance institutions, agents and support organizations2  (“insurers”) from many provisions of the California Consumer Privacy Act of 20183  (“CCPA”). However, as of the April 30 amendment,4  the exemption has not survived. The current version of the bill only exempts insurers from the CCPA insofar as it eliminates a consumer’s right to request that an insurer delete or not sell the consumer’s personal information when the insurer’s retaining or sharing of that information is necessary to complete an insurance transaction on behalf of the consumer.

In addition, the proposal would also amend the Insurance Information and Privacy Protection Act5  (“IIPPA”). Those amendments include the following:

  • Expanding the IIPPA’s requirement that insurers disclose to consumers their information and privacy practices by requiring 1) that the same types of disclosures are made to the general public, and 2) that those disclosures also include the categories of personal information to be collected and the purposes for which the categories of personal information will be used;

  • Requiring insurers to provide a reasonable means by which an individual may exercise the right to opt out of any such disclosures;

  • Amending the definition of “Personal Information” to mirror the CCPA definition, except that the IIPPA definition does not include a reference to “household”;

  • Requiring insurers to implement a written security program with specific program content requirements, including staff training, regular testing, and a third-party management program; and

  • Adding definitions for “Aggregate consumer information,” “Biometric information,” and “Deidentified” information.6

Bottom line: the potential for overlapping requirements and regulators for the insurance industry still exists, and insurers should not delay in preparing for the January 1, 2020, CCPA compliance date.

1 A.B. 981 (Cal. 2019–2020), introduced February 21, 2019.

2 Defined as “insurance institutions, agents, and support organizations” (“Bill Analysis” by Nichole Rapier, P. & C. P., 4/19/19) for the 4/23/19 Hearing on A.B. 981 by the Privacy & Consumer Protection Committee.

3 Cal. Civ. Code §§1798.100–1798.199.

4 A.B. 981 (Cal. 2019–2020), amended April 30, 2019.

5 CA INS § 791.

6 A.B. 981 (Cal. 2019–2020)

© 2020 Faegre Drinker Biddle & Reath LLP. All Rights Reserved.National Law Review, Volume IX, Number 141


About this Author

Josephine Cicchetti Partner Drinker Biddle DC Corporate and Securities, Insurance, Privacy and Cybersecurity, Emerging Securities

Josephine Cicchetti is a corporate and securities lawyer who works extensively within the insurance industry. In addition, for the past several years, Jo’s focus has included emerging securities, privacy, cybersecurity, and insurance regulatory issues. She has represented insurance companies, producers, third-party administrators, investment managers, broker-dealers, and other insurance market participants.

Jo has extensive experience counseling clients in their development and distribution of fixed and variable insurance products. She has more than 20 years of...

Gail Kamal Insurance Litigation Attorney

Gail J. Kamal focuses on complex civil litigation and regulatory matters in the insurance and financial services industries in federal and state courts and in arbitration and mediation proceedings. She has experience with matters involving breach of contract, unfair competition and deceptive trade practices, employment classification, consumer financial protection laws, and cybersecurity and privacy.

Gail worked as a judicial intern for the Circuit Court of Cook County, Illinois, and served a clerkship at the U.S. Department of Justice, Office of Vaccine Litigation.