AN ACT TO revise various insurance laws in order to MAINTAIN NAIC ACCREDITATION, AS RECOMMENDED BY THE DEPARTMENT OF INSURANCE.
The General Assembly of North Carolina enacts:
part I. Supervision of internationally active insurance groups
SECTION 1.(a)  G.S. 58‑19‑5 is amended by adding a new subdivision to read:
"(10a)	Group‑wide supervisor. – The regulatory official authorized to engage in conducting and coordinating group‑wide supervision activities who is determined or acknowledged by the Commissioner under G.S. 58‑19‑38 to have sufficient significant contacts with the internationally active insurance group."
SECTION 1.(b)  G.S. 58‑19‑5 is amended by adding a new subdivision to read:
"(12a)	Internationally active insurance group. – An insurance holding company system that includes an insurer registered under G.S. 58‑19‑25 and that meets all of the following criteria:
a.	The insurance holding company system writes premiums in at least three countries.
b.	The percentage of gross premiums of the insurance holding company system written outside the United States is at least ten percent (10%) of the insurance holding company system's total gross written premiums.
c.	Based on a three‑year rolling average, the total assets of the insurance holding company system are at least fifty billion dollars ($50,000,000,000) or the total gross written premiums of the insurance holding company system are at least ten billion dollars ($10,000,000,000)."
SECTION 1.(c)  Article 19 of Chapter 58 of the General Statutes is amended by adding a new section to read as follows:
"§ 58‑19‑38.  Group‑wide supervision of internationally active insurance groups.
(a)	In cooperation with other state, federal, and international regulatory agencies, the Commissioner will identify a single group‑wide supervisor for an internationally active insurance group in accordance with the provisions of this section. The Commissioner is authorized to act as the group‑wide supervisor for any internationally active insurance group. However, the Commissioner may otherwise acknowledge another regulatory official as the group‑wide supervisor where the internationally active insurance group meets any of the following criteria:
(1)	It does not have substantial insurance operations in the United States.
(2)	It has substantial insurance operations in the United States, but not in this State.
(3)	It has substantial insurance operations in the United States and this State, but the Commissioner has determined pursuant to the factors set forth in subsections (b) and (f) of this section that the other regulatory official is the appropriate group‑wide supervisor.
An insurance holding company system that does not otherwise qualify as an internationally active insurance group may request that the Commissioner make a determination or acknowledgment as to a group‑wide supervisor pursuant to this section.
(b)	The Commissioner shall consider all of the following factors when determining that the Commissioner is the appropriate group‑wide supervisor for an internationally active insurance group that conducts substantial insurance operations concentrated in this State or acknowledges that a regulatory official from another jurisdiction is the appropriate group‑wide supervisor for the internationally active insurance group:
(1)	The place of domicile of the insurers within the internationally active insurance group that holds the largest share of the group's written premiums, assets, or liabilities.
(2)	The place of domicile of the top‑tiered insurer(s) in the insurance holding company system of the internationally active insurance group.
(3)	The location of the executive offices or largest operational offices of the internationally active insurance group.
(4)	Whether another regulatory official is acting or is seeking to act as the group‑wide supervisor under a regulatory system that the Commissioner determines to have either of the following characteristics:
a.	The system is substantially similar to the system of regulation provided under the laws of this State.
b.	The system is otherwise sufficient in terms of providing for group‑wide supervision, enterprise risk analysis, and cooperation with other regulatory officials.
(5)	Whether another regulatory official acting or seeking to act as the group‑wide supervisor provides the Commissioner with reasonably reciprocal recognition and cooperation.
A regulatory official identified under this section as the group‑wide supervisor may determine that it is appropriate to acknowledge another regulatory official to serve as the group‑wide supervisor. The acknowledgment of the group‑wide supervisor shall be made (i) after consideration of the factors listed in subdivisions (1) through (5) of this subsection, (ii) in cooperation with and subject to the acknowledgment of other regulatory officials involved with supervision of members of the internationally active insurance group, and (iii) in consultation with the internationally active insurance group.
(c)	Notwithstanding any other provision of law, when another regulatory official is acting as the group‑wide supervisor of an internationally active insurance group, the Commissioner shall acknowledge that regulatory official as the group‑wide supervisor. However, the Commissioner shall make a determination or acknowledgment as to the appropriate group‑wide supervisor for such an internationally active insurance group pursuant to subsection (b) of this section when there is a material change in the internationally active insurance group that results in either of the following:
(1)	The internationally active insurance group's insurers domiciled in this State holding the largest share of the group's premiums, assets, or liabilities.
(2)	This State being the place of domicile of the top‑tiered insurers in the insurance holding company system of the internationally active insurance group.
(d)	Pursuant to G.S. 58‑19‑35, the Commissioner is authorized to collect from any insurer registered pursuant to G.S. 58‑19‑25 all information necessary to determine whether the Commissioner may act as the group‑wide supervisor of an internationally active insurance group or if the Commissioner may acknowledge another regulatory official to act as the group‑wide supervisor. Prior to issuing a determination that an internationally active insurance group is subject to group‑wide supervision by the Commissioner, the Commissioner shall notify the insurer registered pursuant to G.S. 58‑19‑25 and the ultimate controlling person within the internationally active insurance group. The internationally active insurance group shall have 30 days to provide the Commissioner with additional information pertinent to the pending determination.
(e)	If the Commissioner is the group‑wide supervisor for an internationally active insurance group, the Commissioner is authorized to engage in the following group‑wide supervision activities:
(1)	Assess the enterprise risks within the internationally active insurance group to ensure all of the following:
a.	That the material financial condition and liquidity risks to the members of the internationally active insurance group, that are engaged in the business of insurance, are identified by management.
b.	That reasonable and effective mitigation measures are in place.
(2)	Request, from any member of an internationally active insurance group subject to the Commissioner's supervision, information necessary and appropriate to assess enterprise risk. This information includes information about the governance, risk assessment and management, capital adequacy, and material intercompany transactions of the members of the internationally active insurance group.
(3)	Coordinate and, in reliance on the authority of the regulatory officials of the jurisdictions where members of the internationally active insurance group are domiciled, compel development and implementation of reasonable measures designed to ensure that the internationally active insurance group is able to timely recognize and mitigate enterprise risks to members of the internationally active insurance group that are engaged in the business of insurance.
(4)	Communicate with other state, federal, and international regulatory agencies with jurisdiction over members within the internationally active insurance group and share relevant information through supervisory colleges as set forth in G.S. 58‑19‑37 or otherwise subject to the confidentiality provisions of G.S. 58‑19‑40.
(5)	Request documents or enter into agreements providing the basis for or otherwise clarifying the Commissioner's role as group‑wide supervisor with any insurer registered under G.S. 58‑19‑25, any member of the internationally active insurance group, and any other state, federal, and international regulatory agencies with jurisdiction over members of the internationally active insurance group. These agreements may include provisions for resolving disputes with other regulatory officials. These agreements or documentation shall not serve as evidence in any proceeding that insurers or other persons within an insurance holding company system, not domiciled or incorporated in this State, are doing business in this State or are otherwise subject to jurisdiction in this State.
(6)	Other group‑wide supervision activities, consistent with the authorities and purposes enumerated above, as considered necessary by the Commissioner.
(f)	If the Commissioner acknowledges that another regulatory official from a jurisdiction that is not accredited by the NAIC is the group‑wide supervisor, the Commissioner is authorized to reasonably cooperate, through supervisory colleges or otherwise, with group‑wide supervision undertaken by the group‑wide supervisor, provided that both of the following conditions are met:
(1)	The Commissioner's cooperation is in compliance with the laws of this State.
(2)	The regulatory official acknowledged as the group‑wide supervisor recognizes and cooperates with the Commissioner's activities as a group‑wide supervisor for other internationally active insurance groups where applicable.
Where recognition and cooperation are not reasonably reciprocal, the Commissioner is authorized to refuse recognition and cooperation.
(g)	The Commissioner may enter into agreements with or obtain documentation from any insurer registered under G.S. 58‑19‑25, any affiliate of the insurer, and other state, federal, and international regulatory agencies for members of the internationally active insurance group that provide the basis for or otherwise clarify a regulatory official's role as group‑wide supervisor.
(h)	The Commissioner may adopt rules necessary for the administration of this section.
(i)	A registered insurer subject to this section shall be liable for the reasonable expenses of the Commissioner's participation in the administration of this section, including the engagement of attorneys, actuaries, and any other professionals and reasonable travel expenses."
SECTION 1.(d)  G.S. 58‑19‑40(a) reads as rewritten:
"(a)	Documents, materials, or other information in the possession or control of the Department that are obtained by or disclosed to the Commissioner or any other person in the course of an examination or investigation made pursuant to G.S. 58‑19‑35, and all information reported or provided to the Department pursuant to subdivisions (11a) and (11b) of G.S. 58‑19‑15(b), G.S. 58‑19‑25, G.S. 58–19–30 and G.S. 58–19–38 shall be confidential by law and privileged, shall not be considered a public record under either G.S. 58‑2‑100 or Chapter 132 of the General Statutes, shall not be subject to subpoena, and shall not be subject to discovery or admissible in evidence in any private civil action. However, the Commissioner is authorized to use the documents, materials, or other information in the furtherance of any regulatory or legal action brought as a part of the Commissioner's official duties. The Commissioner shall not otherwise make the documents, materials, or other information public without the prior written consent of the insurer to which it pertains unless the Commissioner, after giving the insurer and its affiliates who would be affected thereby notice and opportunity to be heard, determines that the interest of policyholders, shareholders, or the public will be served by the publication thereof, in which event the Commissioner may publish all or any part of the information in such manner as may be deemed appropriate."

part II. oversight of internal audit functions of insurers or groups of insurers
SECTION 2.(a)  G.S. 58‑10‑190(3) reads as rewritten:
"(3)	"Audit committee" means a committee, or equivalent body, established by the board of directors of an entity for the purpose of overseeing the accounting and financial reporting processes of an insurer or group of insurers, any internal audit function of the insurer or group of insurers, and external audits of financial statements of the insurer or group of insurers. The audit committee of any entity that controls a group of insurers may be deemed to be the audit committee for one or more of these controlled insurers at the election of the controlling person as provided in G.S. 58‑10‑245(f). If an audit committee is not designated by the insurer, the insurer's entire board of directors shall constitute the audit committee."
SECTION 2.(b)  G.S. 58‑10‑190 is amended by adding a new subdivision to read:
"(6a)	"Internal audit function" means a person or persons that provide independent, objective, and reasonable assurance designed to add value and improve an organization's operations and accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes."
SECTION 2.(c)  G.S. 58‑10‑245 is amended by adding a new subsection to read:
"(b1)	The audit committee of an insurer or group of insurers shall be responsible for overseeing the insurer's internal audit function and granting the person or persons performing the function suitable authority and resources to fulfill the requirements of G.S. 58‑10‑246."
SECTION 2.(d)  Article 10 of Chapter 58 of the General Statutes is amended by adding a new section to read as follows:
"§ 58‑10‑246.  Internal audit function requirements.
(a)	Exemption. – An insurer is exempt from the requirements of this section if both of the following apply:
(1)	The insurer has annual direct written and unaffiliated assumed premium, including international direct and assumed premium, but excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, less than five hundred million dollars ($500,000,000).
(2)	If the insurer is a member of a group of insurers, the group has annual direct written and unaffiliated assumed premium including international direct and assumed premium, but excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, less than one billion dollars ($1,000,000,000).
(b)	Function. – The insurer or group of insurers shall establish an internal audit function providing independent, objective, and reasonable assurance to the audit committee and insurer management regarding the insurer's governance, risk management, and internal controls. This assurance shall be provided by performing general and specific audits, reviews, and tests and by employing other techniques deemed necessary to protect assets, evaluate control effectiveness and efficiency, and evaluate compliance with policies and regulations.
(c)	Independence. – In order to ensure that internal auditors remain objective, the internal audit function must be organizationally independent. For purposes of this section, "organizationally independent" means that the internal audit function (i) shall not defer ultimate judgment on audit matters to others and (ii) shall appoint an individual to head the internal audit function who will have direct and unrestricted access to the board of directors of the insurer or group of insurers. Organizational independence does not preclude dual‑reporting relationships.
(d)	Reporting. – The head of the internal audit function shall report to the audit committee with a frequency no less than annually on the periodic audit plan, factors that may adversely impact the internal audit function's independence or effectiveness, material findings from completed audits, and the appropriateness of corrective actions implemented by management as a result of audit findings.
(e)	Additional Requirements. – If an insurer is a member of an insurance holding company system or included in a group of insurers, the insurer may satisfy the internal audit function requirements set forth in this section at the ultimate controlling parent level, an intermediate holding company level, or the individual legal entity level."
SECTION 2.(e)  G.S. 58‑10‑260 is amended by adding a new subsection to read:
"(g)	The requirements of G.S. 58‑10‑246 become effective January 1, 2020. An insurer or group of insurers exempt from G.S. 58‑10‑246 that no longer meets the threshold for exemption shall have one calendar year after the year the threshold is exceeded to comply with the requirements of that section."

PART III. Corporate Governance annual disclosure
SECTION 3.(a)  Article 10 of Chapter 58 of the General Statues is amended by adding a new Part to read:
"Part 11. Corporate Governance Annual Disclosure.
"§ 58‑10‑755.  Purpose and scope.
(a)	The purpose of this Part is to:
(1)	Provide the Commissioner a summary of an insurer or insurance group's corporate governance structure, policies, and practices to permit the Commissioner to gain and maintain an understanding of the insurer's corporate governance framework.
(2)	Outline the requirements for completing a corporate governance annual disclosure with the Commissioner.
(3)	Provide for the confidential treatment of the corporate governance annual disclosure and related information that will contain confidential and sensitive information related to an insurer or insurance group's internal operations and proprietary and trade secret information which, if made public, could potentially cause the insurer or insurance group competitive harm or disadvantage.
(4)	Set forth the procedures for filing and the required contents of the Corporate Governance Annual Disclosure.
(b)	Nothing in this Part shall be construed to prescribe or impose corporate governance standards and internal procedures beyond that which is required under applicable state corporate law. Notwithstanding the foregoing, nothing in this Part shall be construed to limit the Commissioner's authority, or the rights or obligations of third parties, under G.S. 58‑2‑131 through G.S. 58‑2‑134.
(c)	The requirements of this Part shall apply to all insurers domiciled in this state.
"§ 58‑10‑760.  Definitions.
The following definitions apply in this Part:
(1)	CGAD or Corporate Governance Annual Disclosure. – A confidential report filed by an insurer or insurance group made in accordance with the requirements of this Part.
(2)	Insurance group. – Those insurers and affiliates included within an insurance holding company system as defined in G.S. 58‑19‑5.
(3)	Insurer. – Defined in G.S. 58‑1‑5 and includes a person subject to Articles 65 or 67 of this Chapter. Insurer does not include an agency, authority, or instrumentality of the United States; any of its possessions and territories; the Commonwealth of Puerto Rico; the District of Columbia; a state, or a political subdivision of a state.
(4)	Senior management. – Any corporate officer responsible for reporting information to the board of directors at regular intervals or providing this information to shareholders or regulators and shall include the chief executive officer, chief financial officer, chief operations officer, chief procurement officer, chief legal officer, chief information officer, chief technology officer, chief revenue officer, and chief visionary officer.
"§ 58‑10‑765.  Disclosure requirement and filing procedures.
(a)	An insurer, or the insurance group of which the insurer is a member, shall, no later than June 1 of each calendar year, submit to the Commissioner a CGAD that contains the information described in G.S. 58‑10‑775. Notwithstanding any request from the Commissioner made pursuant to subsection (c) of this section, if the insurer is a member of an insurance group, the insurer shall submit the report required by this section to the Commissioner of the lead state for the insurance group, in accordance with the laws of the lead state, as determined by the procedures outlined in the most recent Financial Analysis Handbook adopted by the NAIC. In these instances, a copy of the CGAD must also be provided, upon request, to the chief regulatory official of any state in which the insurance group has a domestic insurer.
(b)	The CGAD must include a signature of the insurer's or insurance group's chief executive officer or corporate secretary attesting to the best of that individual's belief and knowledge that the insurer or insurance group has implemented the corporate governance practices and that a copy of the disclosure has been provided to the insurer's or insurance group's board of directors or the appropriate committee thereof.
(c)	An insurer not required to submit a CGAD under this section shall do so upon the Commissioner's request.
(d)	The insurer or insurance group shall have discretion regarding the appropriate format for providing the required information and may customize the CGAD to provide the most relevant information necessary to permit the Commissioner to gain an understanding of the corporate governance structure, policies, and practices utilized by the insurer or insurance group.
(e)	For purposes of completing the CGAD, the insurer or insurance group may provide information regarding corporate governance at the ultimate controlling parent level, an intermediate holding company level, or the individual legal entity level, depending upon how the insurer or insurance group has structured its system of corporate governance. The insurer or insurance group is encouraged to make the CGAD disclosures (i) at the level at which the insurer's or insurance group's risk appetite is determined, (ii) at the level at which the earnings, capital, liquidity, operations, and reputation of the insurer are overseen collectively and at which the supervision of those factors are coordinated and exercised, or (iii) at the level at which legal liability for failure of general corporate governance duties would be placed. If the insurer or insurance group determines the level of reporting based on these criteria, it shall indicate which of the three criteria was used to determine the level of reporting and explain any subsequent changes in level of reporting.
(f)	The review of the CGAD and any additional requests for information shall be made through the lead state as determined by the procedures within the most recent Financial Analysis Handbook adopted by the NAIC.
(g)	An insurer or insurance group providing information substantially similar to the information required by this Part in other documents provided to the Commissioner, including proxy statements filed in conjunction with Form B requirements, or other state or federal filings provided to the Commissioner, shall not be required to duplicate that information in the CGAD, but shall only be required to cross reference the document in which the information is included. The insurer or insurance group shall clearly reference the location of the relevant information within the CGAD and attach the referenced document if it is not already filed or available to the Commissioner.
(h)	Each year following the initial filing of the CGAD, the insurer or insurance group shall file an amended version of the previously filed CGAD indicating where changes have been made. If no changes were made in the information or activities reported by the insurer or insurance group, the filing shall so state.
"§ 58‑10‑770.  Rules and regulations.
The Commissioner may adopt such rules and issue such orders as shall be necessary to carry out the provisions of this Part.
"§ 58‑10‑775.  Contents of corporate governance annual disclosure.
(a)	The insurer or insurance group shall have discretion over the responses to the CGAD inquiries, provided the CGAD shall contain the material information necessary to permit the Commissioner to gain an understanding of the insurer's or insurance group's corporate governance structure, policies, and practices. The Commissioner may request additional information that he or she deems material and necessary to provide the Commissioner with a clear understanding of the corporate governance policies, the reporting or information system, or controls implementing those policies.
(b)	Notwithstanding subsection (a) of this section, the CGAD shall be prepared consistent with this Part. Documentation and supporting information shall be maintained and made available upon examination or upon request of the Commissioner.
(c)	The insurer or insurance group shall be as descriptive as possible in completing the CGAD, with inclusion of attachments or example documents that are used in the governance process that may provide a means to demonstrate the strengths of their governance framework and practices.
(d)	The CGAD shall describe the insurer's or insurance group's corporate governance framework and structure, including consideration of all of the following:
(1)	The board of directors and various committees thereof ultimately responsible for overseeing the insurer or insurance group and the level at which that oversight occurs, such as the ultimate control level, intermediate holding company level, or legal entity level. The insurer or insurance group shall describe and discuss the rationale for the current board of directors' size and structure.
(2)	The duties of the board of directors and each of its significant committees and how they are governed, such as by bylaws, charters, or informal mandates.
(3)	How the board of directors' leadership is structured, including a discussion of the roles of chief executive officer and chairman of the board of directors within the organization.
(e)	The insurer or insurance group shall describe the policies and practices of the most senior governing entity and significant committees thereof, including a discussion of each of the following factors:
(1)	How the qualifications, expertise, and experience of each board of directors member meet the needs of the insurer or insurance group.
(2)	How an appropriate amount of independence is maintained on the board of directors and its significant committees.
(3)	The number of meetings held by the board of directors and its significant committees over the past year as well as information on director attendance.
(4)	How the insurer or insurance group identifies, nominates, and elects members to the board of directors and its committees, including information on all of the following:
a.	Whether a nomination committee is in place to identify and select individuals for consideration.
b.	Whether term limits are placed on directors.
c.	How the election and reelection processes function.
d.	Whether a board of directors' diversity policy is in place and, if so, how it functions.
(5)	The processes in place for the board of directors to evaluate its performance and the performance of its committees, as well as any recent measures taken to improve performance, including any board of directors or committee training programs that have been put in place.
(f)	The insurer or insurance group shall describe the policies and practices for directing senior management, including a description of each of the following factors:
(1)	Any processes or practices, such as suitability standards, to determine whether officers and key persons in control functions have the appropriate background, experience, and integrity to fulfill their prospective roles, including both of the following:
a.	Identification of the specific positions for which suitability standards have been developed and a description of the standards employed.
b.	Any changes in an officer's or key person's suitability as outlined by the insurer's or insurance group's standards and procedures to monitor and evaluate those changes.
(2)	The insurer's or insurance group's code of business conduct and ethics, including information regarding compliance with laws, rules, and regulations as well as proactive reporting of any illegal or unethical behavior.
(3)	The insurer's or insurance group's processes for performance evaluation, compensation, and corrective action to ensure effective senior management throughout the organization, including a description of the general objectives of significant compensation programs and what the programs are designed to reward. The description shall include sufficient detail to allow the Commissioner to understand how the organization ensures that compensation programs do not encourage or reward excessive risk taking. Elements to be discussed include the following:
a.	The board of directors' role in overseeing management compensation programs and practices.
b.	The various elements of compensation awarded in the insurer's or insurance group's compensation programs and how the insurer or insurance group determines and calculates the amount of each element of compensation paid.
c.	How compensation programs are related to both company and individual performance over time.
d.	Whether compensation programs include risk adjustments and how those adjustments are incorporated into the programs for employees at different levels.
e.	Any clawback provisions built into the programs to recover awards or payments if the performance measures upon which they are based are restated or otherwise adjusted.
f.	Any other factors relevant in understanding how the insurer or insurance group monitors its compensation policies to determine whether its risk management objectives are met by incentivizing its employees.
(4)	The insurer's or insurance group's plans for chief executive officer and senior management succession.
(g)	The insurer or insurance group shall describe the processes by which the board of directors, its committees, and senior management ensure an appropriate amount of oversight to the critical risk areas impacting the insurer's business activities, including a discussion of all of the following:
(1)	How oversight and management responsibilities are delegated between the board of directors, its committees, and senior management.
(2)	How the board of directors is kept informed of the insurer's strategic plans, the associated risks, and steps that senior management is taking to monitor and manage those risks.
(3)	How reporting responsibilities are organized for each critical risk area. The description should allow the Commissioner to understand the frequency at which information on each critical risk area is reported to and reviewed by senior management and the board of directors. This description may include any of the following critical risk areas of the insurer:
a.	Risk management processes.
b.	Actuarial function.
c.	Investment decision‑making processes.
d.	Reinsurance decision‑making processes.
e.	Business strategy/finance decision‑making processes.
f.	Compliance function.
g.	Financial reporting/internal auditing.
h.	Market conduct decision‑making processes.
"§ 58‑10‑780.  Confidentiality.
(a)	Documents, materials, or other information, including the CGAD, in the possession or control of the Department that are obtained by, created by, or disclosed to the Commissioner or any other person under this Part, are recognized as proprietary and to contain trade secrets. All such documents, materials, or other information shall be confidential by law and privileged, shall not be considered a public record under either G.S. 58‑2‑100 or Chapter 132 of the General Statutes, shall not be subject to subpoena, and shall not be subject to discovery or admissible in evidence in any private civil action. However, the Commissioner is authorized to use the documents, materials, or other information in the furtherance of any regulatory or legal action brought as a part of the Commissioner's official duties. The Commissioner shall not otherwise make the documents, materials, or other information public without the prior written consent of the insurer. Nothing in this section shall be construed to require written consent of the insurer before the Commissioner may share or receive confidential documents, materials, or other CGAD‑related information pursuant to subsection (c) of this section to assist in the performance of the Commissioner's duties.
(b)	Neither the Commissioner nor any person who received documents, materials, or other CGAD‑related information, through examination or otherwise, while acting under the authority of the Commissioner, or with whom such documents, materials, or other information are shared pursuant to this Part shall be permitted or required to testify in any private civil action concerning any confidential documents, materials, or information subject to subsection (a) of this section.
(c)	In order to assist in the performance of the Commissioner's regulatory duties, the Commissioner may do all of the following:
(1)	Upon request, share documents, materials, or other CGAD‑related information including the confidential and privileged documents, materials, or information subject to subsection (a) of this section, including proprietary and trade secret documents and materials, with other state, federal, and international financial regulatory agencies, including members of any supervisory college as described in G.S. 58‑19‑37, with the NAIC, and with third‑party consultants pursuant to G.S. 58‑10‑785, provided that the recipient agrees in writing to maintain the confidentiality and privileged status of the CGAD‑related documents, material, or other information and has verified in writing the legal authority to maintain confidentiality.
(2)	Receive documents, materials, or other CGAD‑related information, including otherwise confidential and privileged documents, materials, or information, including proprietary and trade‑secret information or documents, from regulatory officials of other state, federal, and international financial regulatory agencies, including members of any supervisory college as described in G.S. 58‑19‑37, and from the NAIC, and shall maintain as confidential or privileged any documents, materials, or information received with notice or the understanding that it is confidential or privileged under the laws of the jurisdiction that is the source of the document, material, or information.
(d)	The sharing of information and documents by the Commissioner pursuant to this Part shall not constitute a delegation of regulatory authority or rulemaking, and the Commissioner is solely responsible for the administration, execution, and enforcement of the provisions of this Part.
(e)	No waiver of any applicable privilege or claim of confidentiality in the documents, proprietary and trade secret materials or other CGAD‑related information shall occur as a result of disclosure of CGAD‑related information or documents to the Commissioner under this section or as a result of sharing as authorized in this Part.
"§ 58‑10‑785.  NAIC and third‑party consultants.
(a)	The Commissioner may retain, at the insurer's expense, third‑party consultants, including attorneys, actuaries, accountants, and other experts not otherwise a part of the Commissioner's staff as may be reasonably necessary to assist the Commissioner in reviewing the CGAD‑related information or the insurer's compliance with this Part.
(b)	Any persons retained under subsection (a) of this section shall be under the direction and control of the Commissioner and shall act in a purely advisory capacity.
(c)	The NAIC and third‑party consultants shall be subject to the same confidentiality standards and requirements as the Commissioner.
(d)	As part of the retention process, a third‑party consultant shall verify to the Commissioner, with notice to the insurer, that it is free of a conflict of interest and that it has internal procedures in place to monitor compliance with a conflict and to comply with the confidentiality standards and requirements of this Part.
(e)	A written agreement with the NAIC or a third‑party consultant governing sharing and use of information provided pursuant to this Part shall contain all of the following provisions and expressly require the written consent of the insurer prior to making public information provided under this Part:
(1)	Specific procedures and protocols for maintaining the confidentiality and security of CGAD‑related information shared with the NAIC or a third‑party consultant pursuant to this Part.
(2)	Procedures and protocols for sharing by the NAIC only with other state regulators from states in which the insurance group has domiciled insurers. The agreement shall provide that the recipient agrees in writing to maintain the confidentiality and privileged status of the CGAD‑related documents, materials, or other information and has verified in writing the legal authority to maintain confidentiality.
(3)	A provision specifying that ownership of the CGAD‑related information shared with the NAIC or a third‑party consultant remains with the Department and the NAIC's or third‑party consultant's use of the information is subject to the direction of the Commissioner.
(4)	A provision that prohibits the NAIC or a third‑party consultant from storing the information shared pursuant to this Part in a permanent database after the underlying analysis is completed.
(5)	A provision requiring the NAIC or third‑party consultant to provide prompt notice to the Commissioner and to the insurer or insurance group regarding any subpoena, request for disclosure, or request for production of the insurer's CGAD‑related information.
(6)	A requirement that the NAIC or a third‑party consultant to consent to intervention by an insurer in any judicial or administrative action in which the NAIC or a third‑party consultant may be required to disclose confidential information about the insurer shared with the NAIC or a third‑party consultant pursuant to this Part.
"§ 58‑10‑790.  Sanctions.
(a)	Civil Penalties. – Any insurer failing, without just cause, to timely file the CGAD as required in this Part shall be subject to a civil penalty of one hundred dollars ($100.00) for each day's delay, not to exceed a total penalty of one thousand dollars ($1,000).
(b)	Notice and Opportunity to Be Heard Required. – After providing notice and opportunity to be heard in accordance with the provisions of Article 3A of Chapter 150B of the General Statutes, the Commissioner may order the respondent to pay the assessment and civil penalty imposed by this section.
(c)	Disposition of Civil Penalties. – The clear proceeds of civil penalties provided for in this section shall be remitted to the Civil Penalty and Forfeiture Fund in accordance with G.S. 115C‑457.2.
(d)	Reduction of Civil Penalties. – The Commissioner may reduce the penalty if the insurer demonstrates to the Commissioner that the imposition of the penalty would constitute a financial hardship to the insurer.
"§ 58‑10‑795.  Severability clause.
If any provision of this Part other than G.S. 58‑10‑780, or the application thereof to any person or circumstance, is held invalid, such determination shall not affect the provisions or applications of this Part which can be given effect without the invalid provision or application, and to that end the provisions of this Part, with the exception of G.S. 58‑10‑780, are severable.
"§ 58‑10‑800.  Effective date.
The requirements of this Part shall become effective on January 1, 2020. The first filing of the CGAD shall be made on or before June 1, 2020."

Part IV. Other Provisions
SECTION 4.  G.S. 58‑58‑50(a1)(2) reads as rewritten:
"(a1)	As used in this section:
…
(2)	Company. – An entity, including a fraternal benefit society as defined in Article 24, which has written, issued, or reinsured life insurance contracts, accident and health insurance contracts, annuity contracts, pure endowment contracts, or deposit‑type contracts (i) in this State and has at least one such policy in force or on claim or (ii) in any state and is required to hold a certificate of authority to write life insurance, accident and health insurance, annuity contract, pure endowment, or deposit‑type contracts in this State."
SECTION 5.  G.S. 58‑7‑21(b)(4a)d. reads as rewritten:
"d.	Certified reinsurer rating. – The Commissioner shall assign a rating to each certified reinsurer on a legal entity basis, with due consideration being given to the group rating where appropriate, except that an association, including incorporated and individual unincorporated underwriters, that has been approved to do business as a single certified reinsurer may be evaluated on the basis of its group rating. The Commissioner shall publish a list of all certified reinsurers and their ratings. Factors that may be considered as part of the evaluation process include the following:
1.	The certified reinsurer's financial strength rating from an acceptable rating agency. The maximum rating that a certified reinsurer may be assigned will correspond to its financial strength rating as outlined in the table below. The Commissioner shall use the lowest financial strength rating received from an approved rating agency in establishing the maximum rating of a certified reinsurer. A failure to obtain or maintain at least two financial strength ratings from acceptable rating agencies will result in loss of eligibility for certification;
Ratings	Best	S&P	Moody's	Fitch
Secure – 1	A++	AAA	Aaa	AAA
Secure – 2	A+	AA+, AA, AA‑	Aa1, Aa2, Aa3	AA+, AA, AA‑
Secure – 3	A	A+, A	A1, A2	A+, A
Secure – 4	A‑	A‑	A3	A‑
Secure – 5	B++, B+	BBB+, BBB,	Baa1, Baa2,	BBB+, BBB,
	BBB‑	Baa3	BBB‑
Vulnerable	B, B‑,	BB+, BB, BB‑,	Ba1, Ba2, Ba3,	BB+, BB, BB‑,
	– 6	C++, C+,	B+, B, B‑,	B1, B2, B3,	B+, B, B‑,
	C, C‑, D,	CCC, CC, C, D, R	Caa, Ca, C	CCC+, CC,
	E, F			CCC‑, DD
…."
SECTION 6.  Section 3 of this act becomes effective January 1, 2020. Except as otherwise provided, the remainder of this act is effective when it becomes law.