Article 10.5. Telematics and Usage-Based Insurance Programs
1861.5.
For purposes of this article:
(a) “Consent” means a freely given, specific, informed, and unambiguous indication of the consumer’s wishes by which the consumer, or the consumer’s legal guardian, a person who has power of attorney, or a person acting as a conservator for the consumer, including by a statement or by a clear affirmative action, signifies agreement to the processing of telematics data relating to the consumer for a narrowly defined particular purpose. Consent shall be voluntary, informed, affirmative, stand-alone consent provided by the subject consumer before the collection or use of telematics data.
(b) “Consumer authorization” means the manner in which consumer consent is obtained and documented.
(c) “Scoring model” means a computational, statistical, actuarial, or algorithmic methodology capable of evaluating telematics data, or the inferences derived from those methodologies, to generate a numerical score or predictive assessment used directly or indirectly in rating automobile insurance.
(d) “Telematics” means technology that uses vehicle devices, connected devices, mobile applications, embedded systems, or other technological means to collect, transmit, and analyze objectively measurable data for private passenger automobile insurance rating. Telematics shall not include the collection of nondriving-related personal information.
(e) “Telematics data” means information electronically collected, transmitted, or derived that reflects the operation, mileage, or use of a motor vehicle, including speed, acceleration, braking, time of operation, and distance traveled. Telematics data does not include nondriving-related personal information.
(f) “Telematics program” means a program operated by an insurer or third-party telematics provider that collects, receives, analyzes, or uses telematics data for rating.
(g) “Third-party telematics provider” means an entity, including an affiliate of an insurer, that collects, stores, discloses, processes, or analyzes telematics data used in the business of insurance.
1861.51.
(a) A consumer may opt to use telematics to establish their driving record for purposes of paragraph (1) of subdivision (a) of Section 1861.02. Participation in a telematics program shall be strictly voluntary.
(b) An insurer that uses telematics shall not do any of the following:
(1) Require participation in a telematics program as a condition of obtaining or renewing coverage.
(2) Penalize, surcharge, or otherwise adversely underwrite a consumer who declines to participate in a telematics program.
(3) Condition eligibility for a discount upon participation in a telematics program, unless the discount is approved by the commissioner.
(4) Increase premium in increments of less than six months from the date the policy goes into effect.
(c) A consumer may revoke consent for participation in a telematics program at any time. That revocation shall be effective immediately.
(d) An insurer that uses telematics shall establish a process by which the consumer may appeal data collected through the telematics program that the consumer believes is incorrect, or appeal the application of a rating factor to the consumer. The commissioner may adopt regulations pertaining to insurer dispute resolution programs.
(e) A dispute relating to the collection of telematics data via a mobile device shall be resolved in favor of the consumer.
1861.52.
(a) An insurer or third-party telematics provider shall not do any of the following:
(1) Collect or use telematics data without obtaining and documenting prior consumer consent in writing.
(2) Collect or use telematics data that predates the consumer authorization required by this section, including from a third-party telematics provider.
(3) Collect or use telematics data for underwriting, claims, marketing, or any purpose other than rating of private passenger automobile insurance policies pursuant to Sections 660, 661, and 1861.02.
(4) Share or disclose telematics data to a person, other than a third-party telematics provider under contract to provide telematics services to the insurer.
(5) Sell or obtain valuable consideration in connection with the disclosure of telematics data.
(6) Undertake any other prohibited acts specified by the commissioner in regulation.
(b) (1) Consumer authorization shall be all of the following:
(A) Written in clear, plain language easily understood by the consumer.
(B) Free from any feature or characteristic that may confuse a consumer or impair the consumer’s ability to freely express the consumer’s preference. It shall be equally easy for a consumer to opt out of a telematics program as it is to opt in, and ready means shall be provided for a consumer to opt out of a telematics program once the consumer has opted in.
(C) Provided to the department with the rate application seeking to apply telematics to establish an insured’s driving record.
(2) (A) An insurer shall not disclose to a third party any telematics data that is or may be linked to a consumer, other than is necessary to provide the service.
(B) Notwithstanding subparagraph (A), an insurer may disclose telematics data that identifies a consumer, pursuant to subpoena or other legally enforceable process. An insurer shall provide written notice to the consumer before disclosing personally identifiable information pursuant to this subparagraph.
(c) The consumer authorization document shall disclose all of the following, at a minimum:
(1) All categories of telematics data to be collected from the consumer.
(2) The specific devices, methods, and sources that shall be used to collect telematics data from the consumer. The disclosure shall specifically state if audio or visual recordings of the occupants of the vehicle may be taken as part of the insurer’s telematics program.
(3) The specific purpose for which the telematics data will be used.
(4) If and how the telematics data will affect premiums.
(5) The identity of a third-party telematics provider that may access the consumer’s telematics data.
(6) The duration of telematics data retention.
(7) The consumer’s right to access the consumer’s telematics data, the process to access the consumer’s telematics data, and the process to request correction of incorrect telematics data.
(8) The consumer’s right to revoke authorization at any time.
(9) The consumer’s right to appeal the application of rates developed using telematics data or the accuracy of underlying telematics data.
(10) Additional disclosures specified by the commissioner in regulation.
(d) An insurer shall provide a requesting consumer with access to the consumer’s telematics data and a clear explanation of how the data contributed to a rating determination or any other insurer decision that impacted the consumer and that relied upon or was informed by telematics data.
1861.53.
(a) Advertising materials relating to the insurer’s private passenger automobile insurance products shall clearly state that both telematic and traditional insurance products are available to the consumer.
(b) When advertising rates or savings, or providing a quote to a consumer, an insurer shall clearly indicate the rates or savings related to participation in the insurer’s telematics program, and shall provide a comparison rate from an equivalent traditional product offered by the insurer.
1861.54.
(a) Telematics data shall be used only for rating for private passenger automobile insurance, as described in subdivision (a) of Section 660 and paragraph (1) of subdivision (a) of Section 1861.02.
(b) The insurer shall obtain prior consumer authorization before the collection or use of telematics data.
(c) Telematics data shall qualify as a “driving safety record” and shall not be used as a proxy for anything else.
1861.55.
A rate application under which telematics shall be used to establish an insured’s driving record shall be deemed complete only if the insurer submits to the commissioner the following materials related to the insurer’s telematics program:
(a) A complete description of the telematics program.
(b) All telematics data elements collected.
(c) All scoring models, including algorithms, variables, and weighting factors.
(d) All validation studies and actuarial support.
(e) All consumer disclosures and authorization forms.
(f) All contracts with third-party telematics providers.
(g) All documentation relating to privacy and data security protections pertaining to telematics data and the insurer’s telematics program.
(h) A complete class plan application.
(i) Any other information required by the commissioner.
1861.56.
(a) Insurers shall regularly conduct, document, and disclose upon request to the department both of the following:
(1) Validation studies.
(2) Ongoing model governance of scoring models.
(b) The commissioner may require independent audits.
(c) The commissioner may prohibit or suspend an insurer’s use of a telematics program that causes rates to be excessive, inadequate, or unfairly discriminatory in violation of Section 1861.05 or that violates this article.
(d) Upon request by the commissioner, an insurer shall provide documentation regarding the insurer’s compliance with this article, including any records required to be kept pursuant to this article.
(e) Insurers shall retain all information and documentation demonstrating compliance with this article for a minimum of seven years.
1861.57.
(a) Insurers and third-party telematics providers shall implement administrative, technical, and physical safeguards to protect telematics data.
(b) Telematics data shall be retained only as long as necessary for the purposes authorized by the consumer or as required by law.
(c) Unless retention is necessary for compliance, fraud investigation, or any other matter of law, telematics data shall be deleted upon any of the following:
(1) Revocation of consumer authorization.
(2) Termination of participation.
(3) Consumer request.
(d) Telematics data shall not be:
(1) Sold, shared, exchanged, or otherwise disclosed for monetary or other valuable consideration.
(2) Licensed.
(3) Shared or used for marketing.
(4) Used for any purpose, except as permitted under this article and only with explicit consumer authorization.
(5) Transferred to an affiliate or service provider, except as necessary to perform insurance-related services under a written contract that requires data protection obligations.
(e) An insurer is fully responsible for the actions of a third-party telematics provider if the insurer knew that the third-party telematics provider was violating this article and did not take steps to stop the violation.
1861.58.
(a) A contract entered into by an insurer or a third-party telematics provider under contract with an insurer for the function of collecting, storing, processing, or analyzing telematics data shall not relieve the insurer of an obligation under this article.
(b) An insurer shall conduct due diligence on all third-party telematics providers.
(c) During a market conduct exam pursuant to Section 730, an insurer shall maintain and disclose to the department all written contracts with third-party telematics providers.
(d) An insurer is responsible for any violations of this code committed by a third-party telematics provider if the insurer knew that the third-party telematics provider was violating this code and did not take steps to stop the violation.
1861.59.
(a) An insurer shall not deny a consumer the ability to participate in the insurer’s telematics program solely on the basis of one of the following:
(1) A vehicle operated by the consumer.
(2) The consumer’s mobile device, carrier, operating system, or other technological attribute.
(3) The consumer’s lack of mobile device.
(4) Any factor beyond the control of the consumer or that requires the consumer to incur an expense other than the payment of premium.
(b) A licensee or a third-party service provider shall not retaliate against a consumer because the consumer exercised or attempted to exercise the consumer’s rights pursuant to this article, including declining to participate in a telematics program. A licensee or a third-party service provider retaliates against a consumer if the licensee or third-party service provider, as a result of a consumer’s privacy choices, does any of the following:
(1) Infringes upon a right, or impairs or impedes a benefit or protection, that is afforded to a consumer under this article.
(2) Requires the consumer to consent to sharing of the consumer’s personal information for a purpose unrelated to the telematics program to obtain a particular product, coverage, rate, or service, if the consumer has an option to consent to sharing pursuant to this article.
(3) Imposes a fee or charge for a consumer to exercise the consumer’s rights pursuant to this article.
(4) Charges a different rate or premium to the consumer, other than as approved by the commissioner in a rate application using telematics.
(5) Provides a different insurance product.
(c) An insurer shall not condition participation in a telematics program upon waiver of the rights held by a consumer or require a consumer to submit to binding arbitration with respect to any matters arising from the insurer’s telematics program.
1861.6.
(a) A violation of this article constitutes a rating violation pursuant to Sections 1858.07 and 1858.1.
(b) The commissioner may impose any of the following, in accordance with Sections 1858, 1859, and 1859.1:
(1) Civil penalties.
(2) Corrective orders.
(3) Suspension of the insurer’s telematics program.
(4) License discipline, including revocation of the insurer’s certificate of authority.
(c) Hearings and judicial review shall be conducted in accordance with Article 7 (commencing with Section 1858).
1861.61.
The commissioner shall, as the commissioner deems necessary, adopt regulations to administer this article. These regulations shall be exempt from the Administrative Procedure Act (Chapter 3.5 (commencing with Section 11340) of Part 1 of Division 3 of Title 2 of the Government Code).