Insurance code and regulations
The unfair practices article
Insurance depends on trust. The Unfair Practices Article is designed to protect that trust by spelling out what insurers and producers are not allowed to do when dealing with consumers.
For example, they may not misrepresent policy terms, delay or avoid paying legitimate claims, or make misleading statements about competitors. These practices can undermine consumer confidence and distort the market.
Penalties can be severe: fines, suspension, or even loss of a license. In extreme cases, violators may face criminal prosecution. The message is straightforward: insurers must act with honesty, transparency, and good faith.
Privacy protection in California
California has strong privacy protections, and insurance is no exception. Because insurers handle sensitive financial and health information, they must comply with multiple layers of privacy law.
-
California Financial Information Privacy Act (Fin. Code §§4050-4060) - Consumers must give consent before their financial data can be shared.
-
Insurance Information and Privacy Protection Act (CIC §§791-791.29) - Insurers must tell people when data is collected and place limits on how it is shared.
-
CCR Title 10 §§2689.4-2689.22 - Adds practical compliance rules for insurers and licensees.
-
HIPAA - Applies to health insurers, protecting medical records.
-
California Consumer Privacy Act (CCPA) - Gives consumers sweeping rights to know, access, delete, or restrict the sale of their personal information.
-
Shine the Light Law (Civil Code §1798.83) - Forces businesses to disclose what categories of personal information are shared with marketers.
Together, these laws give Californians meaningful control over how their personal and financial data is collected, used, and shared.
Conservation proceedings
Sometimes an insurer’s financial condition deteriorates in a way that could put policyholders at risk. When that happens, the Insurance Commissioner can step in and take control.
This process is called a conservation proceeding. It can include seizing the company’s records, managing day-to-day operations, or even liquidating the business. The purpose isn’t punishment - it’s protection. By intervening early, the Commissioner aims to safeguard policyholders’ claims and reduce disruption in the insurance marketplace.
If an insurer resists this oversight (for example, by refusing to provide financial records), that resistance can lead to criminal charges.
Insurance only works if consumers can rely on claims being paid. That’s why California sets strict financial solvency requirements.
An insurer is considered insolvent if it:
- Cannot meet its obligations on time.
- Has its capital or surplus impaired.
- Doesn’t have enough assets to cover liabilities and reinsurance.
These rules help keep financially unstable insurers from operating in California and protect policyholders from being left with worthless promises.
Reporting and fraud detection
Fraud is a major threat to the insurance system, and agents are often the first to notice warning signs.
Agents should:
- Watch for red flags - such as suspicious applications, inconsistent details, or questionable claims.
- Document their observations carefully and professionally.
- Report concerns to the insurer’s Special Investigation Unit (SIU).
- Refer the case to the Department of Insurance (CDI) if necessary.
Both the CIC and CCR emphasize cooperation in fraud investigations. When agents document and report concerns appropriately, they help protect their company and support the integrity of the insurance marketplace.
Example question
Daniel is a licensed agent in California. After selling a health insurance policy, he forwards his client’s full application (including medical history and Social Security number) to an unaffiliated mortgage company he “partners” with, so they can market home loans to the client. Daniel does this without telling the client or obtaining any written consent.
Is Daniel’s conduct permissible under California’s unfair practices and privacy laws?
No. Daniel’s actions violate California privacy protections by sharing sensitive personal and health information without the client’s consent, and they conflict with the duty to act in good faith and deal fairly with consumers.