ARC 7730C

ARC 7730C

INSURANCE DIVISION[191]

Adopted and Filed

Rulemaking related to public records and fair information practices

The Insurance Division hereby rescinds Chapter 2, "Public Records and Fair Information Practices," Iowa Administrative Code, and adopts a new chapter with the same title.

Legal Authority for Rulemaking

This rulemaking is adopted under the authority provided in Iowa Code chapters 17A and 22.

State or Federal Law Implemented

This rulemaking implements, in whole or in part, Iowa Code chapters 17A and 22.

Purpose and Summary

The purpose of this rulemaking is to rescind Chapter 2 and adopt a new Chapter 2 with revisions. The chapter provides rules about public records and fair information practices.

Public Comment and Changes to Rulemaking

Notice of Intended Action for this rulemaking was published in the Iowa Administrative Bulletin on January 24, 2024, as ARC 7345C. Public hearings were held on February 15, 2024, at 10 a.m.and 3 p.m.at 1963 Bell Avenue, Suite 100, Des Moines, Iowa. No one attended the public hearings. No public comments were received. No changes from the Notice have been made.

Adoption of Rulemaking

This rulemaking was adopted by Douglas Ommen, Iowa Insurance Commissioner, on February 29, 2024.

Fiscal Impact

This rulemaking has no fiscal impact to the State of Iowa.

Jobs Impact

After analysis and review of this rulemaking, no impact on jobs has been found.

Waivers

Any person who believes that the application of the discretionary provisions of this rulemaking would result in hardship or injustice to that person may petition the Division for a waiver of the discretionary provisions, if any, pursuant to 191—Chapter 4.

Review by Administrative Rules Review Committee

The Administrative Rules Review Committee, a bipartisan legislative committee which oversees rulemaking by executive branch agencies, may, on its own motion or on written request by any individual or group, review this rulemaking at its regular monthly meeting or at a special meeting. The Committee's meetings are open to the public, and interested persons may be heard as provided in Iowa Code section 17A.8(6).

Effective Date

This rulemaking will become effective on April 24, 2024.

The following rulemaking action is adopted:

Item 1. Rescind 191—Chapter 2 and adopt the following new chapter in lieu thereof:

CHAPTER 2

PUBLIC RECORDS AND FAIR INFORMATION PRACTICES

191—2.1(17A,22) Statement of policy. The purpose of this chapter is to facilitate broad public access to open records. It also seeks to facilitate sound division determinations with respect to the handling of confidential records and the implementation of the fair information practices Act. This division is committed to the policies set forth in Iowa Code chapter 22. The division's website provides access to all public records. Division staff will cooperate with members of the public in implementing the provisions of that chapter.

191—2.2(17A,22) Definitions. The definitions in Iowa Code section 22.1 are incorporated into this chapter by this reference. In addition to the definitions in rule 191—1.1(502,505), the following definitions apply:

"Confidential record" means a record that is not available as a matter of right for inspection and copying by members of the public under applicable provisions of law. Confidential records may be specified as confidential by Iowa Code section 22.7 or other provisions of law but may be disclosed upon order of a court, the lawful custodian of the record, or by another person duly authorized to release the record. Mere inclusion in a record of information declared confidential by an applicable provision of law does not necessarily make that entire record a confidential record.

"Division" means the insurance division of the department of insurance and financial services created by Iowa Code section 505.1. The division is both the "government body" and the "lawful custodian" as defined in Iowa Code sections 22.1(1) and 22.1(2), respectively. The division is also the "agency" as defined in Iowa Code chapter 17A and referenced in Iowa Code chapter 22. For purposes of this chapter, "division" includes both the commissioner of insurance and the administrator as defined in Iowa Code chapters 502 and 505.

"File," "filed," or "filing," when used as a verb, means submitting or having submitted to the division a record or information. "File" or "filing," when used as a noun, means a record or information.

"Inspect" or "inspection" means the same as "examine" or "examination" in Iowa Code chapter 22. The term "examination" in this chapter does not mean the same as "examination" as used in Iowa Code chapter 22.

"Lawful custodian," as used in Iowa Code section 22.1(2), is the division, the division's record officer, or an employee lawfully delegated authority by the division to act for the division in implementing Iowa Code chapter 22.

"Open record" means a record other than a confidential record.

"Personally identifiable information" means information about or pertaining to an individual in a record that identifies the individual and that is contained in a record system.

"Record" means all or part of a "public record," as defined in Iowa Code section 22.1, that is owned by or in the physical possession of the division.

"Record system" means any group of records under the control of the division from which a record may be retrieved by a personal identifier.

191—2.3(17A,22) General provisions.

2.3(1) Entities holding division records covered by this rule. This rule applies to records belonging to, required by, or created by the division, as well as records held by third parties, including other state agencies, that do any of the following:

a. Perform division functions on behalf of the division;

b. Store records for the division;

c. Perform services for the division; or

d. Otherwise handle records that would be governed by this rule if they were in the possession of the division.

2.3(2) Existing records. A request for access shall apply only to records that exist at the time the request is made and access is provided. The division is not required to create, compile or procure a record solely for the purpose of making it available except as described in Iowa Code section 22.3A and subrule 2.4(5).

2.3(3) Public records. All of the division's records are open records available to the public except for records that are confidential under rule 191—2.12(17A,22) or redactable under rule 191—2.11(17A,22).

2.3(4) Availability of open records. Open records of the division are available to the public for examination and copying unless otherwise provided by state or federal law, regulation or rule.

2.3(5) Office hours. Open records are available for inspection during customary office hours, which are 8 a.m.to 4:30 p.m., Monday through Friday, excluding legal holidays.

2.3(6) Scope. This chapter does not:

a. Require the division to index or retrieve records that contain information about individuals by that person's name or other personal identifier.

b. Make available to the general public records that would otherwise not be available under the public records law, Iowa Code chapter 22.

c. Govern the maintenance or disclosure of, notification of or access to records in the possession of the division that are governed by the regulations of another agency.

d. Apply to grantees, including local governments or subdivisions thereof, administering state-funded programs.

e. Make available records compiled in reasonable anticipation of court litigation or formal administrative proceedings.

f. Make any warranty of the accuracy or completeness of a record.

191—2.4(17A,22) Requests for access to records.

2.4(1) Request for access. Requests for access to open records not available on the division's website may be made in writing, by mail, by email, or online as instructed on the division's website. Requests must identify the particular records sought by name or description in order to facilitate the location of the record. Requests must include the name, address, email address if available, and telephone number of the person requesting the information. A person is not required to give a reason for requesting an open record. If the division has records in its possession that may be public records but that are copies of materials from another agency or public organization, the division may refer individuals to the originating agency or entity.

2.4(2) Response to requests.

a. Access. Access to an open record shall be provided promptly upon request unless the size or nature of the request makes prompt access infeasible. If the size or nature of the request for access to an open record requires time for compliance, the division must comply with the request as soon as feasible.

b. Delay. Access to an open record may be delayed for one of the purposes authorized by Iowa Code section 22.8(4) or 22.10(4), for redaction by the division of confidential information, or for search and review of requested records. The division must promptly give written notice to the requester of the reason for any delay and an estimate of the length of that delay.

c. Deny. The division may deny access to the record by members of the public when warranted under Iowa Code chapter 22 or other applicable law or when the record's disclosure is prohibited by a court order.

2.4(3) Security of record. No person may, without permission from the division, search or remove any record from division files. Inspection and copying of division records must be supervised by the division or a designee of the division in order for the records to be protected from damage and disorganization.

2.4(4) Fees. The division may charge fees for records as authorized by Iowa Code section 22.3 or another provision of law. Under Iowa Code section 22.3, the fee for the copying service, whether electronic or hard copy, or mailing shall not exceed the cost of providing the service. An hourly fee may be estimated in advance and charged for actual division expenses in the inspection, reviewing, and copying of requested records when the total staff time dedicated to fulfilling the request requires an excess of two hours.

2.4(5) Information released. If a person is provided access to less than an entire record, the division shall take measures to ensure that the person is furnished only the information that is to be released. This may be done by providing to the person either an extraction of the information to be released or a copy of the record from which the information not to be released has been otherwise redacted.

191—2.5(17A,22) Access to confidential records.

2.5(1) Procedure. The following provisions are in addition to those specified in rule 191—2.4(17A,22) and are minimum requirements. A statute or another administrative rule may impose additional requirements for access to certain classes of confidential records. A confidential record may, due to its nature or the way it is compiled or stored, contain a mixture of confidential and nonconfidential information. The division shall not refuse to release the nonconfidential information simply because of the manner in which the record is compiled or stored.

a. Form of request. The division shall ensure that there is sufficient information to provide reasonable assurance that access to a confidential record may be granted. Therefore, the division may require the requester to:

(1)Submit the request in writing.

(2)Provide proof of identity and authority to secure access to the record.

b. Response to request. The division must notify the requester of approval or denial of the request for access. The notice must include:

(1)The name and title or position of the person responding on behalf of the division; and

(2)A brief statement of the grounds for denial, including a citation to the applicable statute or other provision of law.

c. Reconsideration of denial. A requester whose request is denied by the division may apply to the commissioner of insurance for reconsideration of the request.

2.5(2) Release of confidential records by the division. The division may release a confidential record or a portion of it to:

a. The legislative services agency pursuant to Iowa Code section 2A.3.

b. The ombudsman pursuant to Iowa Code section 2C.9.

c. Other governmental officials and employees only as needed to enable them to discharge their duties.

d. The public information board pursuant to Iowa Code section 23.6.

191—2.6(17A,22) Requests for confidential treatment. The division may treat a record as a confidential record and withhold it from inspection or refuse to disclose that record to members of the public only to the extent that the division is authorized by Iowa Code section 22.7, another applicable provision of law, or a court order. All other information submitted to the division shall be treated as if that person has no objection to its disclosure to members of the public.

2.6(1) Request. A person may request that all or a portion of a record be confidential. The request for confidential treatment must be submitted in writing to the division and:

a. Identify the information for which confidential treatment is sought.

b. Cite the legal and factual basis that justifies confidential treatment.

c. Identify the name, address, and telephone number of the person authorized to respond to any inquiry or action of the custodian concerning the request.

d. Specify the precise period of time for which the confidential treatment is requested should the request be only for a limited time period.

2.6(2) Additional information. The division may request additional factual information from the person to justify treatment of the record as a confidential record.

2.6(3) Decision. The division must notify the requester in writing of the granting or denial of the request and, if the request is denied, the reasoning for the denial.

2.6(4) Request denied. If the request for confidential treatment of a record is denied, the requester may apply to the commissioner for reconsideration of the request.

2.6(5) Failure to request. Failure of a person to request confidential record treatment for a record does not preclude the division from treating it as a confidential record.

191—2.7(17A,22) Procedure by which additions, dissents, or objections may be entered into certain records. Except as otherwise provided by law, the person who is the subject of a record may have a written statement of additions, dissents or objections entered into that record. The statement shall be filed with the division. The statement must be dated and signed by the person who is the subject of the record and include the person's current address and telephone number. This rule does not authorize the person who is the subject of the record to alter the original record or to expand the official record of any division proceeding.

191—2.8(17A,22) Disclosures without the consent of the subject.

2.8(1) To the extent allowed by law, disclosure of confidential records may occur without the consent of the subject.

2.8(2) Authority to release confidential records. The division may have discretion to disclose some confidential records that are exempt from disclosure under Iowa Code section 22.7 or other law. Any person may request permission to inspect these records withheld from inspection under a statute that authorizes limited or discretionary disclosure as provided in rule 191—2.6(17A,22). If the division initially determines that it will release such records, the division may notify interested persons and withhold the records from inspection as provided in rules 191—2.6(17A,22) and 191—2.7(17A,22).

191—2.9(17A,22) Consent to disclosure by the subject of a confidential record. To the extent permitted by any applicable provision of law, the subject of a confidential record may consent to have a copy of the portion of that record that concerns the subject disclosed to a third party. A request for such a disclosure must be in writing, and the person to whom the record is to be disclosed may be required to provide proof of identity. Appearance of counsel before the division on behalf of a person who is the subject of a confidential record is deemed to constitute consent for the division to disclose records about that person to the person's attorney.

191—2.10(17A,22) Notice to suppliers of information. When the division requests a person to supply information about that person, the division must notify the person by reasonable means of the use that will be made of the information, which persons outside the division might routinely be provided this information, which parts of the requested information are required and which are optional, and the consequences of a failure to provide the information requested.

2.10(1) Notice. The notice shall generally be given at the first contact with the division and need not be repeated. Where appropriate, the notice may be given to a person's legal or personal representative. Notice may be withheld in an emergency or when it would compromise the purpose of a department investigation.

2.10(2) License and examination applicants. License and examination applicants are requested to supply a wide range of information depending on the qualifications for licensure or sitting for an examination, as provided by division statutes, rules and application forms. Failure to provide requested information may result in denial of the application. Some requested information, such as social security numbers, home addresses, examination scores, and criminal histories, is confidential under state or federal law, but most of the information contained in license or examination applications is treated as public information and is freely available for public examination.

2.10(3) License renewal. Licensees are requested to supply a wide range of information in connection with license renewal, both on paper and electronically. Failure to provide requested information may result in denial of the application. Most information contained on renewal applications is treated as public information freely available for public examination, but some information may be confidential under state or federal law.

2.10(4) Investigations. Persons and entities regulated by the division are required to respond to division requests for information as part of the investigation of a complaint or inquiry. Failure to timely respond may result in disciplinary action against the person or entity to which the request is made. Information provided in response to such a request is confidential pursuant to the Iowa Code, including but not limited to Iowa Code sections 502.607(2), 505.8(8)"a," 507E.5, and 523A.803, but may become public if introduced at a hearing that is open to the public, contained in a final order, or filed with a court of judicial review.

2.10(5) Discovery request, subpoenas, and investigations. Notice need not be given in connection with discovery requests in litigation or administrative proceedings, subpoenas, investigations of possible violations of law or similar demands for information.

2.10(6) Other requested information. In general, pursuant to state or federal law, the division requests information necessary for its regulation of insurance, securities, and regulated industries that is required to be provided to the division. This required information may be shared outside the division when required by state or federal law or division rules. Failure of a regulated entity or person to provide this information may result in the denial of the licensure or regulatory approval, as appropriate, for which the information was requested.

191—2.11(17A,22) Personally identifiable information collected by the division. The division collects and maintains open records, some of which may contain personally identifiable information, and some of which may be shared with other state or federal agencies or organizations or vendors. This rule describes the nature and extent of personally identifiable information that is collected, maintained, and retrieved by the division. Unless otherwise stated, the authority for the collection of the record is provided by Iowa Code chapter 502 or 505. Some personally identifiable information is protected by Iowa Code sections 502.607(2)"e" and 505.8(9).

2.11(1) Nature and extent. The following records may contain personally identifiable information:

a. Confidential records. Records listed as confidential records are described in rule 191—2.12(17A,22).

b. Rulemaking records. Rulemaking records may contain information about people who make written or oral comments about proposed rules.

c. Contested case records. Contested case records contain names and identifying numbers of people involved. Evidence and documents submitted as a result of a contested case are contained in contested case records.

d. Licensing records. Licensing records of individuals and entities regulated by the division contain names and identifying numbers of the regulated individual or individuals designated as responsible for the regulated entity.

e. Complaint, inquiry, investigation, and examination records. Complaint, inquiry, investigation, and examination records contain names and identifying numbers of the people who submit, are the subject of, or are otherwise involved in the complaint, inquiry, investigation or examination.

f. Personnel files. The division maintains files containing information about employees of the division and applicants for positions with the division.

2.11(2) Redaction. To the extent that the division finds it necessary to allow inspection of records containing personally identifiable information, the division must, when allowed by law, redact the personally identifiable information prior to allowing the inspection.

2.11(3) Means of storage. Paper and various electronic means of storage are used to store records containing personally identifiable information.

191—2.12(17A,22) Confidential records. This rule describes the types of agency information or records that are confidential. This rule is not exhaustive. The following records shall be kept confidential.

2.12(1) Records that are exempt from disclosure under Iowa Code section 22.7.

2.12(2) Records that constitute attorney work product or attorney-client communications, or that are otherwise privileged. Attorney work product is confidential under Iowa Code sections 22.7(4), 622.10 and 622.11; Iowa R.C.P. 122(c); Fed.R. Civ.P. 26(b)(3); and case law. Attorney-client communications are confidential under Iowa Code sections 622.10 and 622.11, the rules of evidence, the Code of Professional Responsibility, and case law.

2.12(3) Those portions of the division's staff manuals, instructions or other statements issued by the division that set forth criteria or guidelines to be used by division staff in auditing, making inspections, settling commercial disputes or negotiating commercial arrangements, or in the selection or handling of cases, such as operational tactics or allowable tolerances or criteria for the defense, prosecution or settlement of cases, when the disclosure of such statements would enable law violators to avoid detection, facilitate disregard of requirements imposed by law, or give a clearly improper advantage to persons who are in an adverse position to the division, pursuant to Iowa Code sections 17A.2 and 17A.3.

2.12(4) All information obtained and prepared in the course of an inquiry, complaint, or investigation, including but not limited to communications, insurer documents, data, reports, analysis, and notes, pursuant to Iowa Code section 505.8 and chapters 502, 502A, 505, 507A, 507E, 522B, 523C, and 523I.

2.12(5) Information of insurers designated as confidential by applicable law, including but not limited to information and reports that are part of an examination, pursuant to Iowa Code sections 505.17 and 507.14.

2.12(6) Information of the Iowa life and health guaranty association, pursuant to Iowa Code chapters 508C and 515B.

2.12(7) Insurance holding company systems registration and holding company examinations, pursuant to Iowa Code section 522.7.

2.12(8) Information related to the uniform securities Act that is designated nonpublic pursuant to Iowa Code section 502.607.

2.12(9) Information filed with the division related to preneed sellers and sales agents of cemetery and funeral merchandise and funeral services pursuant to Iowa Code chapter 523A.

2.12(10) Information obtained in the course of an examination of a cemetery pursuant to Iowa Code chapter 523I.

2.12(11) All records relating to prearranged funeral contracts, except upon approval by the commissioner of insurance or the attorney general, pursuant to Iowa Code section 523A.204(3).

2.12(12) Identifying details in final orders, decisions, and opinions to the extent required to prevent a clearly unwarranted invasion of personal privacy or trade secrets under Iowa Code section 17A.3(1)"e."

2.12(13) Sealed bids received prior to the time set for public opening of bids, pursuant to Iowa Code section 72.3.

2.12(14) Information related to external review of health care coverage decisions, pursuant to Iowa Code chapter 514J.

2.12(15) Information related to automobile insurance cancellation, pursuant to Iowa Code chapter 515D.

2.12(16) Determination of any suspension of an insurance producer's or other licensee's pending application for licensure, pending request for renewal, or current license, when the suspension is related to failure to pay child support, foster care, or state debt, pursuant to rule 191—10.21(252J).

2.12(17) All other information or records that by law are or may be confidential.

These rules are intended to implement Iowa Code section 22.11.

[Filed 3/1/24, effective 4/24/24]

[Published 3/20/24]

Editor's Note: For replacement pages for IAC, see IAC Supplement 3/20/24.