Insurance Underwriting Reports and the FCRA

An insurer may use information beyond the answers on an application to evaluate an insurance risk. Depending on the product and the consumer, a report may contain credit history, claims history, driving information, or other background details. When a third-party consumer reporting agency assembles or evaluates information for an insurance decision, the FCRA may apply. The law regulates access, accuracy, disclosure, and certain decisions; it does not make every underwriting database or internal insurer record a consumer report automatically.

The main exam sequence is: identify a consumer report, confirm a permissible purpose, use the information within legal limits, and give the required notice if an adverse action is based partly or wholly on the report. Keep that federal framework separate from state insurance-rating rules. In Texas, Insurance Code Chapter 559 and TDI rules regulate credit information and credit scoring for covered personal insurance, with specific limits on prohibited factors and decisions.

What counts as a consumer report?

The FCRA defines a consumer report by reference to information about a consumer’s character, general reputation, personal characteristics, or mode of living that is assembled or evaluated by a consumer reporting agency and used or expected to be used for specified eligibility purposes, including insurance. A credit report from a nationwide bureau is a familiar example, but the concept is broader. Motor vehicle records, claims histories, and some specialized databases can qualify depending on who collected the data and how the product is used.

A report is not necessarily a single document titled “credit report.” A consumer reporting agency may return an insurance score, claim history, or risk indicator derived from underlying data. Whether a product is a consumer report depends on the statutory elements and facts, not just its marketing label. Conversely, an insurer’s own experience with its policyholder is not automatically a third-party consumer report under the FCRA merely because it contains personal information.

TDI explains that insurers may use a Comprehensive Loss Underwriting Exchange (CLUE) report to review a home or vehicle’s claims history. CLUE can show losses reported for a property or car over a seven-year period, including losses from before a new owner acquired the property. If information in a consumer report leads to an insurance decision, the consumer can use FCRA processes to request and dispute the report with the reporting agency.

Permissible purpose for obtaining a report

FCRA §604 limits when a consumer reporting agency may furnish a consumer report. The FTC’s insurer guidance identifies insurance underwriting as a permissible purpose when the report relates to insurance involving the consumer; consumer permission may also provide a basis where applicable. An insurer should not pull a report out of curiosity or for an unrelated person or transaction. The purpose must fit the statute and the consumer relationship.

A permissible purpose to obtain a report does not give unlimited permission to use every item in it. Other state and federal laws may restrict use of particular information, require disclosures, or prohibit unfair discrimination. A report may also contain inaccurate, outdated, mixed-file, or incomplete data. Underwriting staff should match the report to the correct consumer, use the approved purpose, and follow the rules for the product and jurisdiction.

Adverse action and required notice

Under FCRA §615(a), an insurer that takes an adverse action based in whole or in part on information in a consumer report must provide an adverse-action notice. Examples in FTC guidance include denying insurance, increasing a premium, or terminating a policy because of report information. Whether a specific decision is an adverse action depends on the statute, insurance action, and facts; a neutral request for clarification is not necessarily the same as a denial or premium increase.

The notice must identify the consumer reporting agency that supplied the report, including the agency’s address and phone number (and toll-free number where required). It must explain that the agency did not make the insurance decision and cannot give the specific reasons for it. It must also inform the consumer of the right to dispute the accuracy or completeness of report information and the right to request a free copy of the report from the agency within 60 days. The consumer can then direct a dispute to the agency and separately ask the insurer to review its decision.

The reporting agency and insurer perform different roles. The reporting agency supplies the data and investigates a qualifying consumer dispute under the FCRA. The insurer makes the underwriting decision. The notice helps consumers contact the correct party. Telling someone to “call the insurer” without identifying the agency would omit a key statutory right; telling the person that the agency denied coverage would incorrectly assign decision-making to the CRA.

Medical information has special protections

Medical information in a consumer report receives additional treatment under FCRA §604(g). The FTC says an insurer generally must obtain the consumer’s permission before a CRA can issue a consumer report containing medical information, subject to statutory qualifications and exceptions. Use and disclosure of that information are also limited. Do not assume a broad application authorization automatically resolves every FCRA, state insurance, or health-privacy issue; follow the rule applicable to the particular report and transaction.

Texas rules for credit-based insurance scoring

Texas Insurance Code Chapter 559 applies to insurers writing personal insurance coverage that use credit information or credit reports to underwrite or rate that coverage. It permits credit scoring subject to restrictions and rules against unfair discrimination. Texas law prohibits certain uses of credit information, and the state framework requires disclosures of rights and information about how to dispute inaccurate or prohibited credit information. TDI identifies homeowners and personal auto as lines in which companies may use credit scoring.

Texas protections include a rule that credit information cannot be the only factor used to decide whether to sell covered insurance or how much to charge. Certain life events—such as a major illness, death of a close family member, temporary job loss, recent divorce, or identity theft—can entitle an applicant or insured to request an exception when the event adversely affected credit. The insurer may require documentation. Chapter 559 also bars specified credit information, including certain medical collection debt and insurance-related inquiries, from being used in the scoring process.

These state provisions do not replace FCRA. The FCRA governs consumer-report access, accuracy, dispute, and adverse-action notices. Chapter 559 and TDI rules regulate how insurers use credit information in covered Texas personal insurance. A credit-based insurance score is not identical to a consumer’s general credit score, though it may be calculated from credit-history information. A consumer may have rights under both systems.

How a consumer can respond to a report-based decision

1. Read the adverse-action notice and note the reporting agency’s name and contact information.
2. Request the free report from that agency within the FCRA’s 60-day period stated in the notice.
3. Check identity details, account histories, claims, dates, and other information for errors or mixed files.
4. Dispute inaccurate or incomplete information with the reporting agency and provide supporting records.
5. If Texas credit-scoring protections apply, ask the insurer how to invoke a life-event exception or dispute prohibited information.
6. Ask the insurer to reconsider after the reporting agency corrects the data; the CRA does not make the insurance decision.
7. Keep copies of the notice, report, dispute, response, and insurer communications.

Examples

A premium changes after a credit-based score

An applicant is offered homeowners coverage but receives a higher premium after an insurer uses a consumer report. If the action is an adverse action based in whole or part on the report, FCRA notice duties can apply. Texas Chapter 559 may also govern how credit information can be used for that personal insurance. The applicant should receive the required report-source details and dispute rights; the exact rate decision must be reviewed under the filed model and applicable rules.

A claim database lists a loss at a home bought last year

A buyer is told that the property has multiple prior claims. TDI says CLUE can include claims from before the person owned the property. The buyer can request the report and dispute a wrong property match or inaccurate loss entry with the reporting agency. The insurer then decides what effect corrected information has on underwriting.

An insurer obtains medical consumer information

If a consumer report contains medical information, special FCRA consent and use rules may apply. The insurer should identify the specific report, purpose, authorization, and applicable statutory exception rather than rely on general underwriting practice.

Common exam mistakes

• Assuming every insurer database is automatically a consumer report—or that a specialized claims report cannot be one.
• Obtaining a report without a permissible purpose related to the consumer and insurance transaction.
• Treating the CRA as the party that decided to deny coverage or increase premium.
• Failing to give adverse-action information when a decision is based partly on report data.
• Using credit score, credit report, and insurance score as if they were identical terms.
• Assuming Chapter 559 applies to every commercial insurance transaction; it concerns insurers writing personal insurance that use credit information.
• Treating Texas credit-scoring rules as a substitute for federal FCRA duties.
• Ignoring special requirements for medical information in consumer reports.

Frequently asked questions

Can insurers use consumer reports? They may obtain them for a permissible insurance purpose and must comply with FCRA and other laws. What must an adverse-action notice include? It identifies the reporting agency, says the agency did not make the decision, and explains dispute and free-report rights. How long does a consumer have to request the free report? The notice must state the right to request it within 60 days. Can an insurer deny Texas homeowners coverage based only on credit? TDI says credit cannot be the sole factor for the relevant personal insurance decisions. Does a CLUE report show only the current owner’s claims? No; a property report can include claims before the current owner. Does disputing a report automatically reverse the insurance decision? No; the consumer reporting agency addresses report accuracy, while the insurer makes and may reconsider its underwriting decision.

Prepare for the Texas P&C exam

Separate the report, the insurer’s underwriting action, and the rules governing credit use. Remember permissible purpose, adverse-action notice, the CRA’s limited role, and Texas protections for covered personal insurance. Sitonce’s Texas Property and Casualty exam prep covers underwriting and consumer-protection rules.