(215 ILCS 5/Art. VIII.25 heading)

(215 ILCS 5/129) Sec. 129. Short title. This Article may be cited as the Risk Management and Own Risk and Solvency Assessment Law. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.1) Sec. 129.1. Purpose and scope. The purpose of this Article is to provide the requirements for maintaining a risk management framework and completing an own risk and solvency assessment (ORSA) and provide guidance and instructions for filing an ORSA summary report with the Director.The requirements of this Article shall apply to all insurers domiciled in this State unless exempt pursuant to Section 129.7.The General Assembly finds and declares that an ORSA summary report will contain confidential and sensitive information related to an insurer or insurance group's identification of risks material and relevant to the insurer or insurance group filing the report. This information will include proprietary and trade secret information that has the potential for harm and competitive disadvantage to the insurer or insurance group if the information is made public. It is the intent of this General Assembly that the ORSA summary report shall be a confidential document filed with the Director, that the ORSA summary report shall be shared only as stated herein and to assist the Director in the performance of his or her duties, and that in no event shall an ORSA summary report be subject to public disclosure. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.2) Sec. 129.2. Definitions. In this Article:"Insurance group", for the purpose of conducting an ORSA, means those insurers and affiliates included within an insurance holding company system as defined in Section 131.1 of this Code."Insurer" has the same meaning as set forth in Section 2 of this Code, except that it shall not include agencies, authorities, or instrumentalities of the United States or its possessions or territories, the Commonwealth of Puerto Rico, the District of Columbia, or a state or political subdivision of a state."Own risk and solvency assessment" or "ORSA" means a confidential internal assessment, appropriate to the nature, scale, and complexity of an insurer or insurance group, conducted by that insurer or insurance group of the material and relevant risks associated with the insurer or insurance group's current business plan, and the sufficiency of capital resources to support those risks."ORSA Guidance Manual" means the current version of the Own Risk and Solvency Assessment Guidance Manual developed and adopted by the National Association of Insurance Commissioners (NAIC) and as amended from time to time. A change in the ORSA Guidance Manual shall be effective on the January 1 following the calendar year in which the changes have been adopted by the NAIC."ORSA summary report" means a confidential high-level summary of an insurer or insurance group's ORSA. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.3) Sec. 129.3. Risk management framework. An insurer shall maintain a risk management framework to assist the insurer with identifying, assessing, monitoring, managing, and reporting on its material and relevant risks. The requirement of this Section may be satisfied if the insurance group of which the insurer is a member maintains a risk management framework applicable to the operations of the insurer. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.4) Sec. 129.4. ORSA requirement. Subject to Section 129.7 of this Code, an insurer, or the insurance group of which the insurer is a member, shall regularly conduct an ORSA consistent with a process comparable to the ORSA Guidance Manual. The ORSA shall be conducted no less than annually but also at any time when there are significant changes to the risk profile of the insurer or the insurance group of which the insurer is a member. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.5) Sec. 129.5. ORSA summary report.(a) Upon the Director's request, and no more than once each year, an insurer shall submit to the Director an ORSA summary report or any combination of reports that together contain the information described in the ORSA Guidance Manual, applicable to the insurer and the insurance group of which it is a member. Notwithstanding any request from the Director, if the insurer is a member of an insurance group, the insurer shall submit the report or reports required by this subsection (a) if the Director is the lead state commissioner of the insurance group as determined by the procedures within the Financial Analysis Handbook adopted by the National Association of Insurance Commissioners.(b) The report or reports shall include a signature of the insurer or insurance group's chief risk officer or other executive having responsibility for the oversight of the insurer's enterprise risk management process attesting to the best of his or her belief and knowledge that the insurer applies the enterprise risk management process described in the ORSA summary report and that a copy of the report has been provided to the insurer's board of directors or the appropriate committee thereof. (c) An insurer may comply with subsection (a) of this Section by providing the most recent and substantially similar report or reports provided by the insurer or another member of an insurance group of which the insurer is a member to the commissioner of another state or to a supervisor or regulator of a foreign jurisdiction, if that report provides information that is comparable to the information described in the ORSA Guidance Manual. Any such report in a language other than English must be accompanied by a translation of that report into the English language. (d) The first filing of the ORSA summary report shall be in 2015. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.6) Sec. 129.6. Contents of ORSA summary report.(a) The ORSA summary report shall be prepared consistent with the ORSA Guidance Manual, subject to the requirements of subsection (b) of this Section. Documentation and supporting information shall be maintained and made available upon examination or upon the request of the Director.(b) The review of the ORSA summary report, and any additional requests for information, shall be made using similar procedures currently used in the analysis and examination of multi-state or global insurers and insurance groups. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.7) Sec. 129.7. Exemption.(a) An insurer shall be exempt from the requirements of this Article if:(1) the insurer has annual direct written and

unaffiliated assumed premium, including international direct and assumed premium, but excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, less than $500,000,000; and

(2) the insurance group of which the insurer is a

member has annual direct written and unaffiliated assumed premium, including international direct and assumed premium, but excluding premiums reinsured with the Federal Crop Insurance Corporation and Federal Flood Program, less than $1,000,000,000.

(b) If an insurer qualifies for exemption pursuant to item (1) of subsection (a) of this Section, but the insurance group of which the insurer is a member does not qualify for exemption pursuant to item (2) of subsection (a) of this Section, then the ORSA summary report that may be required pursuant to Section 129.5 of this Code shall include every insurer within the insurance group. This requirement may be satisfied by the submission of more than one ORSA summary report for any combination of insurers, provided any combination of reports includes every insurer within the insurance group.(c) If an insurer does not qualify for exemption pursuant to item (1) of subsection (a) of this Section, but the insurance group of which it is a member qualifies for exemption pursuant to item (2) of subsection (a) of this Section, then the only ORSA summary report that may be required pursuant to Section 129.5 shall be the report applicable to that insurer.(d) An insurer that does not qualify for exemption pursuant to subsection (a) of this Section may apply to the Director for a waiver from the requirements of this Article based upon unique circumstances. In deciding whether to grant the insurer's request for waiver, the Director may consider the type and volume of business written, ownership and organizational structure, and any other factor the Director considers relevant to the insurer or insurance group of which the insurer is a member. If the insurer is part of an insurance group with insurers domiciled in more than one state, the Director shall coordinate with the lead state commissioner and with the other domiciliary commissioners in considering whether to grant the insurer's request for a waiver.(e) Notwithstanding the exemptions stated in this Section, the following provisions shall apply:(1) The Director may require that an insurer maintain

a risk management framework, conduct an ORSA, and file an ORSA summary report based on unique circumstances, including, but not limited to, the type and volume of business written, ownership and organizational structure, federal agency requests, and international supervisor requests.

(2) The Director may require that an insurer maintain

a risk management framework, conduct an ORSA, and file an ORSA summary report if the insurer has risk-based capital for a company action level event as set forth in Section 35A-15 of this Code, meets one or more of the standards of an insurer deemed to be in hazardous financial condition as defined in Section 186.1 of this Code, or otherwise exhibits qualities of a troubled insurer as determined by the Director.

(f) If an insurer that qualifies for an exemption pursuant to subsection (a) of this Section subsequently no longer qualifies for that exemption due to changes in premium as reflected in the insurer's most recent annual statement or in the most recent annual statements of the insurers within the insurance group of which the insurer is a member, the insurer shall have one year following the year the threshold is exceeded to comply with the requirements of this Article. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.8) Sec. 129.8. Confidentiality.(a) Documents, materials, or other information, including the ORSA summary report, in the possession or control of the Department that are obtained by, created by, or disclosed to the Director or any other person under this Article, is recognized by this State as being proprietary and to contain trade secrets. All such documents, materials, or other information shall be confidential by law and privileged, shall not be subject to the Freedom of Information Act, shall not be subject to subpoena, and shall not be subject to discovery or admissible in evidence in any private civil action. However, the Director is authorized to use the documents, materials, or other information in the furtherance of any regulatory or legal action brought as a part of the Director's official duties. The Director shall not otherwise make the documents, materials, or other information public without the prior written consent of the insurer.(b) Neither the Director nor any person who received documents, materials, or other ORSA-related information, through examination or otherwise, while acting under the authority of the Director or with whom such documents, materials, or other information are shared pursuant to this Article shall be permitted or required to testify in any private civil action concerning any confidential documents, materials, or information subject to subsection (a) of this Section.(c) In order to assist in the performance of regulatory duties, the Director may:(1) upon request, share documents, materials, or

other ORSA-related information, including the confidential and privileged documents, materials, or information subject to subsection (a) of this Section, including proprietary and trade secret documents and materials with other state, federal, and international financial regulatory agencies, including members of any supervisory college as defined in the Section 131.20c of this Code, with the NAIC, and with any third-party consultants designated by the Director, provided that the recipient agrees in writing to maintain the confidentiality and privileged status of the ORSA-related documents, materials, or other information and has verified in writing the legal authority to maintain confidentiality; and

(2) receive documents, materials, or other

ORSA-related information, including otherwise confidential and privileged documents, materials, or information, including proprietary and trade-secret information or documents, from regulatory officials of other foreign or domestic jurisdictions, including members of any supervisory college as defined in the Section 131.20c of this Code, and from the NAIC, and shall maintain as confidential or privileged any documents, materials, or information received with notice or the understanding that it is confidential or privileged under the laws of the jurisdiction that is the source of the document, material, or information.

(d) The Director shall enter into a written agreement with the NAIC or a third-party consultant governing sharing and use of information provided pursuant to this Article, consistent with this Section that shall:(1) specify procedures and protocols regarding the

confidentiality and security of information shared with the NAIC or a third-party consultant pursuant to this Article, including procedures and protocols for sharing by the NAIC with other state regulators from states in which the insurance group has domiciled insurers; the agreement shall provide that the recipient agrees in writing to maintain the confidentiality and privileged status of the ORSA-related documents, materials, or other information and has verified in writing the legal authority to maintain confidentiality;

(2) specify that ownership of information shared with

the NAIC or a third-party consultant pursuant to this Article remains with the Director and the NAIC's or a third-party consultant's use of the information is subject to the direction of the Director;

(3) prohibit the NAIC or third-party consultant from

storing the information shared pursuant to this Article in a permanent database after the underlying analysis is completed;

(4) require prompt notice to be given to an insurer

whose confidential information in the possession of the NAIC or a third-party consultant pursuant to this Article is subject to a request or subpoena to the NAIC or a third-party consultant for disclosure or production;

(5) require the NAIC or a third-party consultant to

consent to intervention by an insurer in any judicial or administrative action in which the NAIC or a third-party consultant may be required to disclose confidential information about the insurer shared with the NAIC or a third-party consultant pursuant to this Article; and

(6) in the case of an agreement involving a

third-party consultant, provide for the insurer's written consent.

(e) The sharing of information and documents by the Director pursuant to this Article shall not constitute a delegation of regulatory authority or rulemaking, and the Director is solely responsible for the administration, execution, and enforcement of the provisions of this Article.(f) No waiver of any applicable privilege or claim of confidentiality in the documents, proprietary and trade-secret materials, or other ORSA-related information shall occur as a result of disclosure of such ORSA-related information or documents to the Director under this Section or as a result of sharing as authorized in this Article.(g) Documents, materials, or other information in the possession or control of the NAIC or any third-party consultants pursuant to this Article shall be confidential by law and privileged, shall not be subject to the Freedom of Information Act, shall not be subject to subpoena, and shall not be subject to discovery or admissible in evidence in any private civil action. (Source: P.A. 98-910, eff. 7-1-15.)

(215 ILCS 5/129.9) Sec. 129.9. Sanctions. Any insurer failing, without just cause, to timely file the ORSA summary report as required in this Article shall be required, after notice and hearing, to pay a penalty of $200 for each day's delay, to be recovered by the Director, and the penalty so recovered shall be paid into the General Revenue Fund of this State. The Director may reduce the penalty if the insurer demonstrates to the Director that the imposition of the penalty would constitute a financial hardship to the insurer. (Source: P.A. 98-910, eff. 7-1-15.)