Insurance Information and Privacy Protection Act
IIPPA
Financial · Health
Sets standards for how insurers and agents collect, use, and disclose personal information from insurance transactions. It requires notices of information practices, gives consumers access and correction rights, and limits disclosure without written authorization. SB 354 (2026), which would modernize the Act effective 2028, was on the Governor's desk as of September 25, 2026.
- Where
- California
- Citation
- Cal. Ins. Code 791-791.29
- Status
- In force
- In force since
- 1981-10-01
- Last amended
- 2023-01-01
- Enforced by
- California Insurance Commissioner; private plaintiffs for listed rights
- People can sue
- Limited
- Penalties
- Equitable relief for access and correction violations; damages for unlawful disclosures under 791.13; costs and fees (791.20). Commissioner administrative penalties also apply.
- Applies to
- Insurance institutions, agents, and insurance-support organizations handling personal information in connection with insurance transactions
What a privacy notice must say
- Give applicants and policyholders a written notice of information practices at specified times.Cal. Ins. Code 791.04
Rights it gives people
- Individuals may access and request correction of recorded personal information.Cal. Ins. Code 791.08-791.09
Practices it requires
- Do not disclose personal or privileged information without written authorization except as listed.Cal. Ins. Code 791.13
Sources
- Official text
- Cal. Ins. Code 791 (California Legislative Information)
- Cal. Ins. Code 791.04
- Cal. Ins. Code 791.13
- Cal. Ins. Code 791.20
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: 791.08-791.09 not fetched. | SB 354 (2026) status pending.
Research reference, not legal advice.