NATIONAL INSURANCE CRIME BUREAU - Laserfiche WebLink

19 Part 7: Information Disclosure ISO ClaimSearch® Participating Organizations must not disclose third-party information obtained through ISO ClaimSearch—including such information as public records, criminal records, motor vehicle reports, medical records, and police reports—within the Participating Organization or outside the organization except to workforce members or others involved in handling active claims investigations. Authorized Users shall not disclose third-party data from ISO ClaimSearch to unauthorized workforce members or to any entity not involved in the investigation of the claim other than the insurance Participating Organization or entity that provided the initial claim. Participating Organizations that access third-party data shall use the data in ways consistent with the privacy obligations and any other terms and provisions of the Gramm-Leach-Bliley Act (15 U.S.C., Section 6801 et seq) and any similar state or local statutes, rules, and regulations; the Federal Drivers Privacy Protection Act (18 U.S.C., Section 2721 et seq); the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the HIPAA privacy regulations 45 C.F.R. Part 164, the HIPAA security regulations 45 C.F.R. Part 16X, the Health Information Technology for Economic and Clinical Health (HITECH) Act Pub. L. No. 111-005, the Final HIPAA Omnibus Rule, and any similar state and local statutes, rules, and regulations; and such legislation, rules, and regulations as may be enacted by any federal, state, or local government body. In addition, Participating Organizations shall not use any information they receive from third-party data providers for consumer credit purposes, consumer insurance underwriting, employment purposes, or any other purpose covered by the federal Fair Credit Reporting Act (15 U.S.C., Section 1681 et seq) or similar state or local statutes, rules, or regulations. Participating Organizations that access ISO ClaimSearch Information must acknowledge that much, if not all, of the materials and information contained within ISO ClaimSearch consists of confidential and/or proprietary information. This information must be held in strictest confidence and shall be kept confidential to protect other Participating Organizations’ interests. Participating Organizations should refrain from gaining access to, copying, republishing, transferring for any commercial purpose, or reading such information that they do not have a need to know. Participating Organizations may not produce ISO ClaimSearch Information to any third party unless compelled to do so by legal process. In the event an ISO ClaimSearch Participating Organization must comply with a document production request that includes ISO ClaimSearch Information, the Participating Organization must redact all fields of information as they appear in ISO ClaimSearch Information and output with the exception of the record type, date of loss, type of policy, coverage type, and the personally identifiable information that pertain to the individual about whom the infor- mation is to be disclosed. If the product is reprinted or otherwise used in part, the following legend that appears at the bottom of each page must not be removed. If the product is reprinted or other- wise used in whole or in part, the foregoing legend must remain: “Includes copyrighted material of Insurance Services Office, Inc., with its permission.” Participating Organizations must use the third- party data from ISO ClaimSearch for claims adjustment and investigation only. Docusign Envelope ID: 329281D2-142C-8B83-837A-7CD218C257C4