* § 3451. Identity theft group insurance policies. (a)(1) An identity
theft group insurance policy, and certificates thereunder, may be issued
or delivered in this state only in accordance with the provisions of
this section.

(2) An identity theft group insurance policy, and certificates
thereunder, may be issued only by an authorized insurer.

(3) The policy may be issued to:

(A) an employer, or a trustee or trustees of the fund established by
an employer, which employer or trustee shall be deemed the policyholder,
where the policy insures the employees of the employer;

(B) a labor union, or a trustee or trustees of a fund established by a
labor union, which labor union or trustee shall be deemed the
policyholder, where the policy insures the members of the labor union;

(C) a trustee of a trust established, or participated in, by two or
more employers or labor unions, or by one or more employers and one or
more labor unions, which the trustee shall be deemed the policyholder,
where the policy insures the employees of the employers, and the members
of the labor unions;

(D) a sponsor, where the policy insures account group members, as the
terms are defined in subsection (a) of section three thousand four
hundred forty-two of this article;

(E) an association, or to a trustee or trustees of a fund established,
created, or maintained for the benefit of one or more associations,
which the association or trustee shall be deemed the policyholder; where
all the eligible members of the association or associations have the
same profession, trade, or occupation, and the association or
associations have been organized and maintained in good faith for
purposes principally other than that of obtaining insurance, and have
been in active existence for at least two years, and where the policy
insures the members of the associations;

(F) a business that sells services or products designed to prevent, or
to minimize the effects of stolen identity events, which the business
shall be deemed to be the policyholder, where the policy insures the
persons that purchase the services or products;

(G) any other business or association that has in its possession
individuals' personal identification information, where the policy
insures the individuals whose information the business or association
possesses; or

(H) any other entity where the superintendent has determined in a
regulation that the members are engaged in a common enterprise, or have
an economic or social affinity or relationship, and that the issuance of
the policy would not be contrary to the best interests of the public.

(4) For purposes of this section, the term "employer" shall include
subsidiaries or affiliates of the employer.

(b) The group shall consist only of natural persons, hereinafter
referred to as group members, as specified in paragraph three of
subsection (a) of this section, and may also include a member of the
group member's immediate family or household or, where the group
policyholder is a sponsor, an authorized user, as the terms are defined
in subsection (a) of section three thousand four hundred forty-two of
this chapter.

(c)(1) The policy shall cover losses and expenses incurred because of
stolen identity events, as defined in subparagraph (E) of paragraph
seven of subsection (a) of section one thousand one hundred thirteen of
this chapter.

(2) An insurer shall treat in a like manner all eligible group members
of the same class.

(3) Except for groups as described in subparagraph (F) of paragraph
three of subsection (a) of this section, a group member shall not be
required to purchase any product or service to be eligible for the
coverage.

(d) The premium for the group policy, including certificates, may be
paid by the group policyholder from funds contributed: (1) wholly by the
group policyholder; (2) wholly by the group members; or (3) jointly by
the group policyholder and the group members, except that with regard to
subparagraph (G) of paragraph three of subsection (a) of this section,
the premium for the group policy shall be paid from funds contributed
wholly by the group policyholder.

(e) A group identity theft insurance policy or certificate issued
thereunder, shall not be subject to section three thousand four hundred
twenty-five or section three thousand four hundred twenty-six of this
article. The following requirements shall apply with regard to
cancellation, nonrenewal, or conditional renewal of coverage:

(1) Unless the group policy provides for a longer policy period, the
policy shall be issued or renewed for a one-year policy period.

(2) A group policy, or any certificate thereunder, may be cancelled by
an insurer only if cancellation is based upon one or more of the reasons
set forth in paragraph one of subsection (c) of section three thousand
four hundred twenty-six of this article, provided, however, that an act
or omission by a group member shall not constitute the basis for
cancellation of the policy and provided further, that coverage for an
individual group member shall terminate upon termination of the member's
employment by, or other affiliation with, the group policyholder that
constitutes membership in the group.

(3) An insurer's cancellation, nonrenewal, or conditional renewal of a
group policy, or any certificate issued thereunder, shall not become
effective until at least forty-five days, or twenty days if based upon
non-payment of premium, after the insurer mails or delivers written
notice of the cancellation or nonrenewal to the group policyholder at
the mailing address shown in the policy and to affected certificate
holders at each certificate holder's last known mailing address. If so
authorized by the insurer, the group policyholder may mail or deliver
the notice to the certificate holder on behalf of the insurer. For
purposes of this section, the term "conditional renewal" shall mean a
renewal that is conditioned upon change of limits, change in type of
coverage, reduction or elimination of coverage, increased deductible or
addition of exclusion, or increased premiums in excess of ten percent
(exclusive of any premium increase generated as a result of increased
exposure units or as a result of experience rating, loss rating,
retrospective rating, or audit).

(4) Every notice of cancellation, nonrenewal, or conditional renewal
shall set forth the specific reason or reasons for cancellation,
nonrenewal, or conditional renewal.

(5) A group policyholder may cancel the group policy for any reason
upon thirty days written notice to the insurer and each affected group
member. A group policyholder shall not be required to give notice to a
group member if substantially similar coverage has been obtained from
another insurer without lapse of coverage.

(6) If prior to the effective date of cancellation, nonrenewal, or
conditional renewal of the group policy, or cancellation, nonrenewal,
conditional renewal or termination of a certificate, whether initiated
by the insurer, group policyholder, or by the group member, with respect
to the group member's certificate, a group member sustains an identity
theft loss, the loss shall remain covered in accordance with the
coverage provided under the policy, notwithstanding the cancellation,
nonrenewal, conditional renewal, or termination.

(f) The superintendent may promulgate regulations pertaining to
identity theft group insurance, including regulations regarding:
payments of dividends or retrospective premium refunds; minimum
provisions; minimum number of group members; and other reasonable
limitations.

* NB There are 2 § 3451's