FIELD UNDERWRITING · 6 MIN READ

AML, Privacy, and Federal Screening Requirements

Federal financial-crimes law reaches insurance through FinCEN's anti-money-laundering rule for insurance companies, which covers insurers issuing covered products — permanent life insurance (other than group), individual annuities, and other products with cash value or investment features. Covered insurers must run a written AML program with training for employees and producers, because the producer is the customer-facing sensor for laundering red flags. Two reports carry the tested thresholds. A Currency Transaction Report is required for currency transactions over $10,000. A Suspicious Activity Report must be filed when the insurer knows, suspects, or has reason to suspect a transaction of $5,000 or more involves illicit funds, evades reporting, lacks lawful purpose, or facilitates crime — filed within 30 calendar days of initial detection, with up to 30 additional days to identify a suspect. Under the USA PATRIOT Act's Customer Identification Program requirements, firms collect and verify name, date of birth, address, and identification number at account opening, and the Customer Due Diligence rule extends identification to the beneficial owners of legal-entity customers. Every applicant must be screened against OFAC's Specially Designated Nationals list before binding coverage — transactions with listed parties are blocked, full stop. Privacy statutes wrap around the underwriting file. Gramm-Leach-Bliley requires an initial privacy notice no later than establishing the customer relationship, periodic notices thereafter, and — before sharing nonpublic personal information with nonaffiliated third parties outside the exceptions — a reasonable opportunity to opt out, generally 30 days. The NAIC privacy models implement these duties at the state level, and the Insurance Information and Privacy Protection Model adds consumer rights against insurers specifically: access to recorded personal information within 30 business days of a written request, rights to seek correction or deletion, limits on pretext interviews, and disclosure-authorization standards. The Fair Credit Reporting Act governs consumer reports used in underwriting — insurers must use reasonable procedures, provide adverse-action disclosures, and producers must disclose that an investigative report or MIB check may be made. Finally, the FTC's Identity Theft Red Flags Rule requires financial institutions and creditors offering covered accounts — including some cash-value insurance arrangements — to maintain a written identity theft prevention program with four elements: identify relevant red flags, detect them, respond appropriately, and update the program periodically.