<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>57578</law_id><section_number>38.2-628</section_number><catch_line>Confidentiality</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><structure><unit label="title" level="1" order_by="1" identifier="38.2">Insurance</unit><unit label="chapter" level="2" order_by="1" identifier="6">Insurance Information and Privacy Protection</unit><unit label="article" level="3" order_by="1" identifier="2">Insurance Data Security Act</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> Any documents, <span class="dictionary">materials</span>, or other information in the control or <span class="dictionary">possession</span> of the <span class="dictionary">Bureau</span> that are furnished by a <span class="dictionary">licensee</span> or an employee or agent thereof acting on behalf of <span class="dictionary">licensee</span> pursuant to subsection H of &#xA7; <a class="law" title="Information security program" href="/38.2-623/">38.2-623</a> or subdivisions B 2, 3, 4, 5, 8, 10, and 11 &#xA7; <a class="law" title="Notice to Commissioner" href="/38.2-625/">38.2-625</a>, or that are obtained by the <span class="dictionary">Commissioner</span> in an investigation or examination pursuant to &#xA7; <a class="law" title="Powers and duties of the Commission; exclusive state standards" href="/38.2-627/">38.2-627</a>, shall be confidential by <span class="dictionary">law</span> and privileged, shall not be subject to &#xA7; <a class="law" title="Duties of clerk; records; copies; personal identifiable information; records related to the administrative activities of the Commission; unauthorized filings" href="/12.1-19/">12.1-19</a>, shall not be subject to <span class="dictionary">subpoena</span>, and shall not be subject to <span class="dictionary">discovery</span> or <span class="dictionary">admissible</span> in <span class="dictionary">evidence</span> in any private <span class="dictionary">civil action</span>. However, the <span class="dictionary">Commissioner</span> is authorized to use the documents, <span class="dictionary">materials</span>, or other information in the furtherance of any regulatory or legal action brought as a part of the <span class="dictionary">Commissioner</span>&#x2019;s duties. <a id="paragraph-210937" class="section-permalink" href="https://vacode.org/38.2-628/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> Neither the <span class="dictionary">Commissioner</span> nor any <span class="dictionary">person</span> who received documents, <span class="dictionary">materials</span>, or other information while acting under the authority of the <span class="dictionary">Commissioner</span> shall be permitted or required to testify in any private <span class="dictionary">civil action</span> concerning any confidential documents, <span class="dictionary">materials</span>, or information subject to subsection A. <a id="paragraph-210938" class="section-permalink" href="https://vacode.org/38.2-628/#B"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> In <span class="dictionary">order</span> to assist in the performance of the <span class="dictionary">Commissioner</span>&#x2019;s duties under this article, the <span class="dictionary">Commissioner</span> may: <a id="paragraph-210939" class="section-permalink" href="https://vacode.org/38.2-628/#C"><i class="fa fa-link"/></a></p></section>
						<section id="C1" class="indent-1"><p><span class="prefix-number">1.</span> Share documents, <span class="dictionary">materials</span>, or other information, including the confidential and privileged documents, <span class="dictionary">materials</span>, or information subject to subsection A, with other <span class="dictionary">state</span>, federal, and international regulatory agencies; with the National Association of <span class="dictionary">Insurance</span> <span class="dictionary">Commissioners</span> (NAIC), its affiliates, or its subsidiaries; and with <span class="dictionary">state</span>, federal, and international <span class="dictionary">law</span>-enforcement authorities, provided that the recipient agrees in writing to maintain the confidentiality and privileged status of the documents, <span class="dictionary">materials</span>, or other information; <a id="paragraph-210940" class="section-permalink" href="https://vacode.org/38.2-628/#C1"><i class="fa fa-link"/></a></p></section>
						<section id="C2" class="indent-1"><p><span class="prefix-number">2.</span> Receive documents, <span class="dictionary">materials</span>, or information, including otherwise confidential and privileged documents, <span class="dictionary">materials</span>, or information, from the NAIC, its affiliates, or its subsidiaries and from regulatory and <span class="dictionary">law</span>-enforcement officials of other foreign or domestic <span class="dictionary">jurisdictions</span>, and shall maintain as confidential or privileged any documents, <span class="dictionary">materials</span>, or information received with notice or the understanding that it is confidential or privileged under the <span class="dictionary">laws</span> of the <span class="dictionary">jurisdiction</span> that is the source of the documents, <span class="dictionary">materials</span>, or information; <a id="paragraph-210941" class="section-permalink" href="https://vacode.org/38.2-628/#C2"><i class="fa fa-link"/></a></p></section>
						<section id="C3" class="indent-1"><p><span class="prefix-number">3.</span> Share documents, <span class="dictionary">materials</span>, or other information subject to subsection A with a third-<span class="dictionary">party</span> consultant or vendor provided the consultant agrees in writing to maintain the confidentiality and privileged status of the documents, <span class="dictionary">materials</span>, or other information; and <a id="paragraph-210942" class="section-permalink" href="https://vacode.org/38.2-628/#C3"><i class="fa fa-link"/></a></p></section>
						<section id="C4" class="indent-1"><p><span class="prefix-number">4.</span> Enter into agreements governing sharing and use of information consistent with this subsection. <a id="paragraph-210943" class="section-permalink" href="https://vacode.org/38.2-628/#C4"><i class="fa fa-link"/></a></p></section>
						<section id="D"><p><span class="prefix-number">D.</span> No <span class="dictionary">waiver</span> of any applicable <span class="dictionary">privilege</span> or claim of confidentiality in the documents, <span class="dictionary">materials</span>, or information shall occur as a result of disclosure to the <span class="dictionary">Commissioner</span> under this section or as a result of sharing as authorized in subsection C. <a id="paragraph-210944" class="section-permalink" href="https://vacode.org/38.2-628/#D"><i class="fa fa-link"/></a></p></section>
						<section id="E"><p><span class="prefix-number">E.</span> Documents, <span class="dictionary">materials</span>, or other information in the <span class="dictionary">possession</span> or control of the NAIC or a third-<span class="dictionary">party</span> consultant or vendor as a result of an examination or investigation pursuant to subsection H of &#xA7; <a class="law" title="Information security program" href="/38.2-623/">38.2-623</a> or subdivisions B 2, 3, 4, 5, 8, 10, and 11 of &#xA7; <a class="law" title="Notice to Commissioner" href="/38.2-625/">38.2-625</a> shall be confidential by <span class="dictionary">law</span> and privileged, shall not be subject to &#xA7; <a class="law" title="Duties of clerk; records; copies; personal identifiable information; records related to the administrative activities of the Commission; unauthorized filings" href="/12.1-19/">12.1-19</a>, shall not be subject to <span class="dictionary">subpoena</span>, and shall not be subject to <span class="dictionary">discovery</span> in any private <span class="dictionary">civil action</span>. <a id="paragraph-210945" class="section-permalink" href="https://vacode.org/38.2-628/#E"><i class="fa fa-link"/></a></p></section>
						<section id="F"><p><span class="prefix-number">F.</span> Nothing in this article shall prohibit the <span class="dictionary">Commissioner</span> from releasing final, adjudicated actions that are open to public inspection to a database or other clearinghouse service maintained by the NAIC, its affiliates, or its subsidiaries. <a id="paragraph-210946" class="section-permalink" href="https://vacode.org/38.2-628/#F"><i class="fa fa-link"/></a></p></section></text><history>2020, c. 264.</history><metadata></metadata></law>
