Question

Difficulty: MediumSources of Underwriting Information

A life insurance underwriter determines that assessing a new applicant's risk profile will require both an Attending Physician's Statement (APS) and an Investigative Consumer Report. Which of the following compliance actions MUST be completed during this information-gathering phase? (Select all that apply)

  1. Obtaining a signed authorization from the applicant that complies with HIPAA privacy rules before requesting the APS.Answer
  2. Providing the applicant with a written disclosure notifying them that an Investigative Consumer Report may be requested.Answer
  3. C
    Delaying the delivery of any FCRA-related disclosures until the underwriter makes a formal adverse underwriting decision.
  4. D
    Authorizing the insurance producer to sign the required medical release forms on the applicant's behalf to prevent processing delays.

Answer

The required compliance actions are obtaining a HIPAA-compliant signed authorization for the APS and providing a written disclosure to the applicant regarding the Investigative Consumer Report.
To legally gather third-party underwriting information, insurers must strictly adhere to federal privacy laws. This requires securing a HIPAA-compliant signature directly from the applicant to access medical records for an APS, and providing an upfront written disclosure under the FCRA to notify the applicant that an Investigative Consumer Report is being ordered.

Step-by-Step Solution

1
Identify the regulatory frameworks governing the required underwriting reports.
The APS involves medical records and is governed by HIPAA privacy rules, while the Investigative Consumer Report involves character and reputation and is governed by the Fair Credit Reporting Act (FCRA).
Different sources of underwriting information have specific legal compliance mandates designed to protect consumer privacy and rights.
2
Determine the HIPAA requirements for obtaining an Attending Physician's Statement.
The insurer must secure the applicant's explicit written consent before accessing their medical records.
HIPAA strictly prohibits healthcare providers from sharing protected health information with insurers without an authorized, signed consent form.
3
Determine the FCRA requirements for ordering an Investigative Consumer Report.
The insurer must provide a written disclosure to the applicant notifying them that such an investigation may be conducted.
The FCRA requires consumers to be informed upfront when their personal character and lifestyle are being investigated through third-party interviews.
4
Evaluate the procedural errors in the incorrect options.
Delaying the FCRA notice until an adverse action is taken violates upfront disclosure rules. Additionally, allowing a producer to forge an applicant's signature is illegal.
Adverse action notices are a separate FCRA requirement that do not replace the mandatory upfront disclosure for investigative reports. Furthermore, only the applicant can legally authorize the release of their own medical information.

Key Concept

Compliance Requirements for Sources of Underwriting Information
Rate this question