400.403—Required system of records.
Insurance providers are required to implement a system of records for obtaining, using, and storing documents containing SSN or EIN data before they accept or receive any applications for insurance. This data should include: name; address; city and state; SSN or EIN; and policy numbers which have been used by FCIC or the insurance provider.