If an insurer takes an adverse action based upon credit information, the insurer must meet all of the following notice requirements:
(1) Provide notification to the consumer that an adverse action has been taken, in accordance with the requirements of the federal Fair Credit Reporting Act, 15 U.S.C. § 1681m(a).
(2) Provide notification to the consumer explaining the reason for the adverse action. The reasons must be provided in sufficiently clear and specific language so that a person can identify the basis for the insurer's decision to take an adverse action. Such notification shall include a description of up to 4 factors that were the primary influences of the adverse action. The use of generalized terms such as “poor credit history,” “poor credit rating,” or “poor insurance score” does not meet the explanation requirements of this paragraph. Standardized credit explanations provided by consumer reporting agencies or other third-party vendors are deemed to comply with this section.
(3) If the adverse action is a denial of personal insurance, provide notification that the applicant may inquire further about the credit information on which the denial is based and obtain a free copy of the credit report, the applicant may do so by mailing a written request to the insurer, or other such party as the insurer may identify in the notice, no more than 30 days after the date the notice of refusal was mailed to the applicant.
(4) Provide a statement that the consumer reporting agency that provided the credit information upon which the denial was based did not make the denial decision and is unable to provide the applicant the specific reasons for the denial.
(5) If the adverse action is a denial of personal insurance, the notice of denial shall be retained by the insurer and a record of the insurance score, related notice and correspondence with the applicant shall be maintained by the insurer or their vendor for a minimum of 3 years from the date of the denial notification to the applicant.