USA PATRIOT Act, anti-money-laundering, and Gramm-Leach-Bliley privacy

Why federal law rides along with your application

When you take an application for cash-value life insurance or an annuity, you are not just selling protection -- you are moving money and collecting identity and financial data. Three federal frameworks turn that moment into a compliance checkpoint: the USA PATRIOT Act's anti-money-laundering (AML) requirements, the suspicious activity reporting system, and the Gramm-Leach-Bliley Act (GLBA) privacy rules. Treat them as part of the field underwriting routine, not paperwork you handle later.

Anti-money laundering and the USA PATRIOT Act

Money laundering generally moves through three stages: placement of illicit funds into the financial system, layering through transactions that obscure the trail, and integration, where the money re-emerges looking legitimate. Products that store value -- permanent life insurance with cash value, and annuities -- are attractive for layering, because a policy can absorb funds and later be surrendered, exchanged, or borrowed against so the payout looks like clean insurance proceeds.

Because of that exposure, insurers that issue covered products must maintain a written AML program. A compliant program is built around four pillars:

• a designated compliance officer accountable for the program;
• ongoing training for employees and for the producers who sell covered products;
• internal policies, procedures, and controls, including customer identification and verification; and
• independent testing to confirm the program actually works.

As the producer, you are the eyes of that program. Verify the applicant's identity from acceptable identification, record it accurately, and never accept a stand-in signer or an application with blanks you plan to fill later. Screen and escalate names that appear on federal lists of blocked or sanctioned persons through your carrier's process.

Red flags you are expected to notice

• Cash or cash-like payment when the product does not call for it
• Overpaying a premium and then asking for the refund to go to a third party
• Indifference to cost, investment performance, or surrender charges
• Early surrender or unusual haste to liquidate, especially after a large deposit
• A premium payer with no apparent relationship or insurable interest
• Reluctance to provide identifying information, or unusual insistence on secrecy
• Purchases that do not fit the applicant's stated income, occupation, or objectives

When something looks wrong, report it to your carrier, using the carrier's channel. Suspicious activity reporting is confidential: you must not tell the customer or anyone else that a report was made or considered. Tipping off is prohibited, and "the client asked me to keep it quiet" is never a defense.

Gramm-Leach-Bliley: notice, choice, and safeguards

GLBA governs nonpublic personal information (NPI) -- the financial, health, and identifying information an applicant gives you that is not publicly available. It imposes three duties:

1. Notice. Deliver a clear initial privacy notice describing what information is collected, how it is used and shared, and how it is protected.
2. Choice. Before NPI is shared with nonaffiliated third parties, the consumer must get a reasonable chance to opt out. Ordinary servicing of the account and processing the transaction the consumer asked for do not require an opt-out.
3. Safeguards. Protect NPI with administrative, technical, and physical measures: locked storage, password protection, secure transmission, and shredding rather than tossing.

Practically, that means no applications left in your car or in an unlocked file, no unsecured email or text of Social Security numbers or medical answers, and no discussing an applicant's health history with a spouse, employer, or fellow agent who has no role in the transaction.

Where Texas law overlaps

The federal rules sit on top of state law, they do not replace it. Texas separately prohibits unfair methods of competition and unfair or deceptive acts or practices in the business of insurance, so misrepresenting why you need information, or mishandling what you collect, can create state exposure as well.

Tex. Ins. Code ch. 541 governs unfair or deceptive acts and practices; Tex. Ins. Code ch. 1101 governs the life insurance policies and applications you are completing.