Subd. 1. Requirement; content.

An authorization used by an insurer, insurance-support organization, or insurance agent to disclose or collect personal or privileged information must be in writing and must meet the following requirements:

1. (1) is written in plain language;
2. (2) is dated;
3. (3) specifies the types of persons authorized to disclose information about the person;
4. (4) specifies the nature of the information authorized to be disclosed;
5. (5) names the insurer or insurance agent and identifies by generic reference representatives of the insurer to whom the person is authorizing information to be disclosed;
6. (6) specifies the purposes for which the information is collected; and
7. (7) specifies the length of time the authorization remains valid.

Subd. 2. Application.

1. (a) If the authorization is signed to collect information in connection with an application for a property and casualty insurance policy, a policy reinstatement, or a request for a change in benefits, the authorization must not remain valid for longer than one year from the date the authorization is signed or the date the insurer grants or denies coverage, reinstatement, or change in benefits, whichever is sooner.
2. (b) If the authorization is signed to collect information in connection with an application for a life, disability, and health insurance policy or contract, reinstatement, or request for change in benefits, the authorization may not remain valid for longer than 26 months from the date the authorization is signed.
3. (c) This section and section 72A.502, subdivisions 1 and 12, do not apply to the collection and use of a numeric product referred to as an insurance score or credit score that is used by a licensed insurance agent exclusively for the purpose of underwriting or rating an insurance policy, if the agent informs the policyholder or prospective policyholder requesting the insurance coverage that an insurance score or credit score will be obtained for the purpose of underwriting or rating the policy.

Subd. 3. Claims.

If the authorization is signed to collect information in connection with a claim for benefits under an insurance policy, the authorization must not remain valid for longer than:

1. (1) the term of coverage of the policy, if the claim is for a health insurance benefit; or
2. (2) the duration of the claim, if the claim is for a claim other than for a health insurance benefit.

Subd. 4. Authorization; noninsurers.

If an authorization is submitted to an insurer, insurance-support organization, or insurance agent by a person other than an insurer, insurance-support organization, or insurance agent, the authorization must be dated, signed by the person, and obtained one year or less before the date a disclosure is sought.