Law / United States / 
Utah
Prohibition against certain use of Social Security number by health insurers, administrators and their subcontractors
In force since .
A sensitive categories rule binding public and private bodies.
- Obligation class
- Prohibition
As of .
What it requires
- If you are an accident and health insurer, health maintenance organization or third-party administrator the section covers, or a subcontractor of one (including a pharmacy benefit manager), do not publicly display or publicly post an individual's Social Security number in any manner (Utah Code 31A-22-634(2)(a)).
- Do not print an individual's Social Security number on any card the individual needs to access products or services provided or covered by the insurer (Utah Code 31A-22-634(2)(b)).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Penalty structure
Utah Code 31A-2-308(1): a person who violates any insurance statute or rule shall forfeit to the state up to twice the amount of any profit gained from the violation, and the commissioner may order any person other than an individual producer, surplus line producer, limited line producer, managing general agent, reinsurance intermediary, adjuster, third party administrator, navigator, or insurance consultant to forfeit not more than $5,000 for each violation (not more than $2,500 for each of those listed). The $5,000 ceiling is recorded as per_violation_amount.
- Rule
- Per violation only
- As of
- Currency
- USD
- Per violation unit
- Violation
- Per violation amount
- 5,000
Who enforces it
Enforcement body
Utah Commissioner of Insurance (Insurance Department), who may order a person that violates an insurance statute or rule to forfeit to the state up to $5,000 for each violation (Utah Code 31A-2-308(1)).
What this law does
An insurer or its subcontractors, including a pharmacy benefit manager, may not publicly display or publicly post in any manner an individual's Social Security number, or print an individual's Social Security number on any card required for the individual to access products or services provided or covered by the insurer.
For the section, "insurer" means the insurers governed by Part 6 of Chapter 22 as described in Section 31A-22-600, including a health maintenance organization and a third-party administrator that is subject to the title, and a health, dental, medical, Medicare supplement, or conversion program offered under the Public Employees' Benefit and Insurance Program Act.
The section does not prevent the collection, use, or release of a Social Security number as required by state or federal law, the use of a Social Security number for internal verification or administrative purposes, or the release of a Social Security number to a health care provider for claims administration purposes, or as part of the verification, eligibility, or payment process.
An insurer that complies with a federal law requiring the United States Department of Health and Human Services to establish a national unique patient health identifier program is considered in compliance with the section. An insurer was required to comply with the section by , and could obtain an extension, which the commissioner was to grant for a period not to exceed if the explanation provided was reasonable. The section was last amended by Chapter 297, 2011 General Session.
When LexLint raises it
When your app profile says your app is an insurer.