<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>85477</law_id><section_number>38.2-1334.9</section_number><catch_line>Confidentiality</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><structure><unit label="title" level="1" order_by="1" identifier="38.2">Insurance</unit><unit label="chapter" level="2" order_by="1" identifier="13">Reports, Reserves and Examinations, Insurance Holding Companies, Reinsurance Intermediaries, and Managing General Agents</unit><unit label="article" level="3" order_by="1" identifier="5.1">Risk Management Framework; Own Risk and Solvency Assessments</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> The <span class="dictionary">ORSA summary report</span> is recognized by the Commonwealth as containing confidential and sensitive information related to an <span class="dictionary">insurer</span> or <span class="dictionary">insurance group</span>&#x2019;s identification of risks <span class="dictionary">material</span> and relevant to the <span class="dictionary">insurer</span> or <span class="dictionary">insurance group</span> filing the report. This information includes proprietary and trade secret information that has the potential for harm and competitive disadvantage to the <span class="dictionary">insurer</span> or <span class="dictionary">insurance group</span> if the information is made public. The <span class="dictionary">ORSA summary report</span> shall be a confidential document filed with the <span class="dictionary">Commission</span>, the report may be shared only as stated in this article and to assist the <span class="dictionary">Commission</span> in the performance of its duties, and in no event shall the report be subject to public disclosure. <a id="paragraph-306203" class="section-permalink" href="https://vacode.org/38.2-1334.9/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> Documents, <span class="dictionary">materials</span>, or other information, including the <span class="dictionary">ORSA summary report</span>, in the <span class="dictionary">possession</span> of or control of the <span class="dictionary">Commission</span> that is obtained by, created by, or disclosed to the <span class="dictionary">Commission</span> or any other <span class="dictionary">person</span> under this article is declared to be proprietary and to contain trade secrets. All such documents, <span class="dictionary">materials</span>, or other information shall be confidential by <span class="dictionary">law</span> and privileged, shall not be subject to <span class="dictionary">subpoena</span>, and shall not be subject to <span class="dictionary">discovery</span> or <span class="dictionary">admissible</span> in <span class="dictionary">evidence</span> in any private <span class="dictionary">civil action</span>. However, the <span class="dictionary">Commission</span> is authorized to use the documents, <span class="dictionary">materials</span>, or other information in the furtherance of any regulatory or legal action brought as a part of the <span class="dictionary">Commission</span>&#x2019;s official duties. The <span class="dictionary">Commission</span> shall not otherwise make the documents, <span class="dictionary">materials</span>, or other information public without the prior written consent of the <span class="dictionary">insurer</span>. <a id="paragraph-306204" class="section-permalink" href="https://vacode.org/38.2-1334.9/#B"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> Neither the <span class="dictionary">Commission</span> nor any <span class="dictionary">person</span> who received documents, <span class="dictionary">materials</span>, or other ORSA-related information, through examination or otherwise, while acting under the authority of the <span class="dictionary">Commission</span> or with whom such documents, <span class="dictionary">materials</span>, or other information is shared pursuant to this article shall be permitted or required to testify in any private <span class="dictionary">civil action</span> concerning any confidential documents, <span class="dictionary">materials</span>, or information subject to subsections A and B. <a id="paragraph-306205" class="section-permalink" href="https://vacode.org/38.2-1334.9/#C"><i class="fa fa-link"/></a></p></section>
						<section id="D"><p><span class="prefix-number">D.</span> In <span class="dictionary">order</span> to assist in the performance of the <span class="dictionary">Commission</span>&#x2019;s regulatory duties, the <span class="dictionary">Commission</span>: <a id="paragraph-306206" class="section-permalink" href="https://vacode.org/38.2-1334.9/#D"><i class="fa fa-link"/></a></p></section>
						<section id="D1" class="indent-1"><p><span class="prefix-number">1.</span> May, upon request, share documents, <span class="dictionary">materials</span>, or other ORSA-related information, including the confidential and privileged documents, <span class="dictionary">materials</span>, or information subject to subsection A, including proprietary and trade secret documents and <span class="dictionary">materials</span>, with other <span class="dictionary">state</span>, federal, and international financial regulatory agencies, including any forum for cooperation and communication between insurance supervisors, known as a supervisory college, that is established for the purpose of facilitating the effectiveness of supervision of <span class="dictionary">insurers</span>, with the <span class="dictionary">NAIC</span>, and with any third-<span class="dictionary">party</span> consultants designated by the <span class="dictionary">Commission</span>, provided that the recipient agrees in writing to maintain the confidentiality and privileged status of the ORSA-related documents, <span class="dictionary">materials</span>, or other information and has verified in writing the legal authority to maintain confidentiality; <a id="paragraph-306207" class="section-permalink" href="https://vacode.org/38.2-1334.9/#D1"><i class="fa fa-link"/></a></p></section>
						<section id="D2" class="indent-1"><p><span class="prefix-number">2.</span> May receive documents, <span class="dictionary">materials</span>, or other ORSA-related information, including otherwise confidential and privileged documents, <span class="dictionary">materials</span>, or information, including proprietary and trade-secret information or documents, from regulatory officials of other foreign or domestic <span class="dictionary">jurisdictions</span>, including members of any supervisory college, and from the <span class="dictionary">NAIC</span> and shall maintain as confidential or privileged any documents, <span class="dictionary">materials</span>, or information received with notice or the understanding that it is confidential or privileged under the <span class="dictionary">laws</span> of the <span class="dictionary">jurisdiction</span> that is the source of the document, <span class="dictionary">material</span>, or information; and <a id="paragraph-306208" class="section-permalink" href="https://vacode.org/38.2-1334.9/#D2"><i class="fa fa-link"/></a></p></section>
						<section id="D3" class="indent-1"><p><span class="prefix-number">3.</span> Shall enter into a written agreement with the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant governing the sharing and use of information provided pursuant to this article, consistent with this subsection. The agreement shall:
				a. Specify procedures and protocols regarding the confidentiality and security of information shared with the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant pursuant to this article, including procedures and protocols for sharing by the <span class="dictionary">NAIC</span> with other <span class="dictionary">state</span> regulators from <span class="dictionary">states</span> in which the <span class="dictionary">insurance group</span> has domiciled <span class="dictionary">insurers</span>. The agreement shall provide that the recipient agrees in writing to maintain the confidentiality and privileged status of the ORSA-related documents, <span class="dictionary">materials</span>, or other information and has verified in writing the legal authority to maintain confidentiality;
				b. Specify that ownership of information shared with the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant pursuant to this article remains with the <span class="dictionary">Commission</span> and that the use of information by the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant is subject to the direction of the <span class="dictionary">Commission</span>;
				c. Prohibit the <span class="dictionary">NAIC</span> or third-<span class="dictionary">party</span> consultant from storing the information shared pursuant to this article in a permanent database after the underlying analysis is completed;
				d. Require prompt notice to be given to an <span class="dictionary">insurer</span> whose confidential information in the <span class="dictionary">possession</span> of the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant pursuant to this article is subject to a request or <span class="dictionary">subpoena</span> to the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant for disclosure or production;
				e. Require the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant to consent to intervention by an <span class="dictionary">insurer</span> in any judicial or administrative action in which the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant may be required to disclose confidential information about the <span class="dictionary">insurer</span> shared with the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant pursuant to this article; and
				f. In the case of an agreement involving a third-<span class="dictionary">party</span> consultant, provide for the <span class="dictionary">insurer</span>&#x2019;s written consent. <a id="paragraph-306209" class="section-permalink" href="https://vacode.org/38.2-1334.9/#D3"><i class="fa fa-link"/></a></p></section>
						<section id="E"><p><span class="prefix-number">E.</span> The sharing of information and documents by the <span class="dictionary">Commission</span> pursuant to this article shall not constitute a delegation of regulatory authority or rulemaking, and the <span class="dictionary">Commission</span> is solely responsible for the administration, execution, and enforcement of the provisions of this article. <a id="paragraph-306210" class="section-permalink" href="https://vacode.org/38.2-1334.9/#E"><i class="fa fa-link"/></a></p></section>
						<section id="F"><p><span class="prefix-number">F.</span> No <span class="dictionary">waiver</span> of any applicable <span class="dictionary">privilege</span> or claim of confidentiality in the documents, proprietary and trade-secret <span class="dictionary">materials</span>, or other ORSA-related information shall occur as a result of disclosure of such ORSA-related information or documents to the <span class="dictionary">Commission</span> under this section or as a result of sharing as authorized in this article. <a id="paragraph-306211" class="section-permalink" href="https://vacode.org/38.2-1334.9/#F"><i class="fa fa-link"/></a></p></section>
						<section id="G"><p><span class="prefix-number">G.</span> Documents, <span class="dictionary">materials</span>, or other information in the <span class="dictionary">possession</span> or control of the <span class="dictionary">NAIC</span> or a third-<span class="dictionary">party</span> consultant pursuant to this article shall be confidential by <span class="dictionary">law</span> and privileged, shall not be subject to <span class="dictionary">subpoena</span>, and shall not be subject to <span class="dictionary">discovery</span> or <span class="dictionary">admissible</span> in <span class="dictionary">evidence</span> in any private <span class="dictionary">civil action</span>. <a id="paragraph-306212" class="section-permalink" href="https://vacode.org/38.2-1334.9/#G"><i class="fa fa-link"/></a></p></section></text><history>2014, c. 248.</history><metadata></metadata></law>
