New Mexico Administrative Code
Title 13 - INSURANCE
Chapter 1 - INSURANCE GENERAL PROVISIONS
Part 3 - PRIVACY OF NONPUBLIC PERSONAL INFORMATION
Section 13.1.3.18 - EXCEPTIONS TO NOTICE AND AUTHORIZATION REQUIREMENTS FOR DISCLOSURE OF NONPUBLIC PERSONAL INFORMATION FOR PROCESSING AND SERVICING TRANSACTIONS

(a) To carry out the transaction or the product or service business of which the transaction is a part, and record, service or maintain the consumer's account in the ordinary course of providing the insurance product or service;

(b) To administer, adjust, manage, or service benefits or claims relating to the transaction or the product or service business of which it is a part;

(c) To provide a confirmation, statement or other record of the transaction, or information on the status or value of the insurance product or service to the consumer or the consumer's agent or broker;

(d) To accrue or recognize incentives or bonuses associated with the transaction that are provided by a licensee or any other party;

(e) To underwrite insurance at the consumer's request;

(f) To perform the following insurance functions: policy placement or issuance, account administration, detecting, reporting, investigating or preventing actual or potential fraud, material misrepresentation or criminal activity, processing premium payments, processing insurance claims, administering insurance benefits (including utilization review activities), loss control, risk management, case management, disease management, quality assurance, quality improvement, performance evaluation, provider credentialing verification, peer review activities, participating in research projects, grievance procedures; internal administration of compliance, managerial, and information systems; policyholder service functions; auditing; reporting; database security; administration of consumer disputes and inquiries; external accreditation standards; the replacement of a group benefit plan or workers compensation policy or program; activities in connection with a sale, merger, transfer or exchange of all or part of a business or operating unit; any activity that permits disclosure without authorization pursuant to the federal Health Insurance Portability and Accountability Act privacy rules promulgated by the U.S. Department of Health and Human Services; disclosure that is required, or is one of the lawful or appropriate methods, to enforce the licensee's rights or the rights of other persons engaged in carrying out a transaction or providing a product or service that a consumer requests or authorizes; and any activity otherwise permitted by law, required pursuant to governmental reporting authority, or to comply with legal process; or

(g) In connection with the authorization, settlement, billing, processing, clearing, transferring, reconciling or collection of amounts charged, debited or otherwise paid using a debit, credit or other payment card, check or account number, or by other payment means; the transfer of receivables, accounts or interests therein; or the audit of debit, credit or other payment information.