Limits on re-disclosure and reuse of nonpublic personal financial information – Wis. Admin. Code Ins §25-35

If an insurer receives nonpublic personal financial information from an unaffiliated financial institution under an exception provided by law, the insurer may use or disclose that information only under the following circumstances:

• The insurer may only disclose the information to affiliates of the financial institution it received the information from;
• The insurer may disclose the information to its affiliates, but they can only use or disclose the information to the extent the insurer can;
• The insurer may use or disclose the information in the ordinary course of business, based on an exception.

If an insurer receives nonpublic personal financial information from an unaffiliated financial institution not based on an exception provided by law, the insurer may not  use or disclose that information except to the following:

• To affiliates of the financial institution it received the information from;
• To its own affiliates, but only to the extent that the insurer can use or disclose the information;
• To any other person, if direct disclosure by the financial institution to that person would be lawful.

If an insurer discloses nonpublic personal financial information to an unaffiliated third party, not based on an exception provided by law, the third party may not disclose that information except under the following circumstances:

• To the insurer’s affiliates;
• To the third party’s affiliates;
• To any other person if the disclosure would have been lawful if directly made.