Law / United States / 
Texas
Insurer privacy rule: notice and opt-out for nonpublic personal financial information about individuals
28 Tex. Admin. Code secs. 22.1 and 22.2
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2025. Publisher's page: https://texreg.sos.state.tx.us/public/readtac$ext.TacPage?sl=R&app=9&p_dir=&p_rloc=&p_tloc=&p_ploc=&pg=1&p_tac=&ti=28&pt=1&ch=22&rl=1In force since .
A data subject rights rule binding private bodies.
- Obligation class
- Disclosure, Data subject rights, Consent
- Audit expectation
- none
As of .
What it requires
- If you are a covered entity under the Texas Department of Insurance's insurance consumer financial information privacy rule, give individuals notice of your privacy policies and practices (28 Texas Administrative Code Section 22.1(a)(1)).
- Do not disclose nonpublic personal financial information about an individual to a nonaffiliated third party except under the conditions the rule describes, and give the individual the methods the rule provides to prevent that disclosure (28 Texas Administrative Code Section 22.1(a)(2), (3)).
These lines are LexLint's reading of the law's text, as of .
What it makes you log
Logging duty
The rule requires a covered entity to give individuals a notice of its privacy policies and practices and to honor the methods that let an individual prevent disclosure to nonaffiliated third parties. A notice and an opt-out are not a log, and the sections read do not require a covered entity to keep a record of its processing or give any body a power to inspect one.
- Kind
- None
- As of
What this law does
The Texas Department of Insurance rule governs the treatment of nonpublic personal financial information about individuals by all covered entities. It requires a covered entity to provide notice to individuals about its privacy policies and practices. It describes the conditions under which a covered entity may disclose nonpublic personal financial information about individuals to nonaffiliated third parties and provides methods for individuals to prevent that disclosure.
The rule does not apply to information about companies or about individuals who obtain products or services for business, commercial or agricultural purposes.
When LexLint raises it
When your app profile says your app is an insurer.