To properly evaluate the risk profile of a prospective policyholder, an underwriting department determines that both an Attending Physician's Statement (APS) and an Investigative Consumer Report are necessary. Regarding the regulatory compliance for obtaining and using these specific sources of underwriting information, which of the following statements are true?
- The applicant must sign a HIPAA-compliant disclosure authorization before the insurer can legally request the Attending Physician's Statement from their medical provider.Answer
- The insurer must provide a written disclosure to the applicant stating that an Investigative Consumer Report may be compiled, no later than three days after the report is requested.Answer
- CThe insurer must issue an FCRA adverse action notification to the applicant immediately upon ordering the Investigative Consumer Report.
- DThe producer is permitted to unilaterally amend the applicant's original medical questionnaire if the Attending Physician's Statement reveals missing health history.
Answer
The legally required actions are obtaining a signed HIPAA-compliant authorization prior to requesting the APS, and providing written notification to the applicant about the Investigative Consumer Report within three days of its request.
The applicant's signed authorization is federally required under HIPAA to release the Attending Physician's Statement. Additionally, the Fair Credit Reporting Act (FCRA) strictly mandates that applicants receive written disclosure about an Investigative Consumer Report within three days of the report being ordered.
Step-by-Step Solution
Key Concept
Compliance Requirements for Sources of Underwriting Information (FCRA and HIPAA)