Which forms and disclosures are typically required to comply with privacy and consent requirements in field underwriting?

• A. A completed application only.
• B. A completed application with HIPAA release and privacy notices, but no consent for consumer reports.
• C. A completed application, a signed authorization for disclosure of medical information (HIPAA release), consent for consumer reports (MIB and other background checks as applicable), and state privacy notices.
• D. Privacy notices are not required.

Answer: (C)

In field underwriting, protecting the applicant’s privacy requires more than just an application. You need a signed HIPAA release to authorize the disclosure of medical information, and a signed consent for consumer reports to permit the insurer to access and review information from MIB and other background checks as applicable. In addition, state privacy notices are typically required to inform the applicant about how their data will be collected, used, shared, and protected, and to outline their rights. The completed application initiates the process, but without the HIPAA release you can’t share medical details, without the consumer-report consent you can’t obtain these reports, and without the state privacy notices you’d miss mandated disclosures. The combination of these elements best ensures compliance with privacy and consent requirements.