Back to Industry

Industry - Lawsuit

moderateAnti-Privacy → Lawsuit

Executive Summary

California lawmakers are advancing legislation (SB 354) that would modernize insurance data privacy laws, giving consumers more control over how their personal information is collected, used, and shared by insurers and third-party service providers. The bill would authorize the state insurance commissioner to investigate violations and impose penalties ranging from $5,000 to $1 million, addressing gaps in oversight as insurers increasingly use sophisticated technologies to process sensitive c...

What Happened

California lawmakers are advancing SB 354, the Insurance Consumer Privacy Protection Act of 2025, sponsored by Senator Monique Limón and Insurance Commissioner Ricardo Lara. The legislation would modernize insurance data privacy laws that have not been updated since before the widespread adoption of smartphones and social media. It would establish a new privacy rights framework requiring insurers and their third-party service providers to give consumers greater control over their personal information, and would authorize the state insurance commissioner to investigate violations and impose penalties between $5,000 and $1 million.

Who Is Affected

All California insurance customers are affected, as state law requires consumers to hold multiple types of insurance and insurers collect significant amounts of personal information to manage risk and service transactions. The bill addresses consumers who currently receive confusing privacy notices and may be subject to overcollection of their data and its distribution to unintended recipients. Third-party service providers and insurance licensees operating in California would also be subject to the new requirements.

Why It Matters

California's existing insurance privacy laws have not kept pace with modern data collection practices, leaving consumers vulnerable as insurers increasingly use sophisticated technologies to process sensitive personal information. The bill addresses a significant oversight gap regarding how much data insurers collect, what purposes it serves, who receives it, and how long it is retained. Given that consumers are legally required to purchase insurance and must share extensive personal data to obtain coverage, this legislation would establish accountability in an industry relationship where consumers have limited bargaining power.

What You Should Do

California residents should monitor the progress of SB 354 as it moves through the legislative process and contact their state representatives to express support or concerns. Review your current insurance privacy notices to understand what personal information your insurers collect and share. When the law takes effect, exercise your new rights to request information about data collection practices and limit sharing where possible. If you believe your insurance provider has mishandled your personal information, you will be able to file complaints with the California Insurance Commissioner's office for investigation.

Summary generated from verified sources and reviewed before publication. How we summarize.

Sources

Related Events

California lawmakers are advancing legislation (SB 354) that would modernize... - Industry | PrivacyWire