AI Help for Insurance Agents › Guides › Compliance for agencies

AI, texting, and client data at an insurance agency: the rules in plain terms

What rules apply when an agency uses AI to text, call, or handle client data?

In plain terms, using AI doesn't create a new rulebook. It runs new activity through the rules that already govern how your agency contacts people and protects their information. Three areas matter most: phone and text contact under the TCPA, state insurance rules on advertising and records, and client-data protection under the GLBA and state privacy laws.

None of this stops you from using AI. It shapes how you use it: with consent, with disclosure, with a human reviewing what goes out, and with records of what happened. The rest of this page walks each area in plain terms. Again, this is context, not advice -- confirm the specifics with a licensed professional or your state DOI.

The short version

• Get consent before texting or auto-calling. The TCPA generally expects prior express consent for many marketing texts and automated calls.
• Disclose an AI caller. If an AI voice answers or places a call, the person on the line should be told.
• Watch quiet hours and opt-outs. Respect the times you may contact people, and stop when someone says stop.
• State rules vary. Insurance is regulated state by state, so advertising and recordkeeping rules differ where you're licensed.
• Protect client data. The GLBA and state privacy rules cover the nonpublic personal information your AI vendor can see.

The TCPA: consent, AI-caller disclosure, quiet hours, and opt-outs

The Telephone Consumer Protection Act (TCPA) is the federal law that governs texts and automated or pre-recorded calls. When an AI tool texts a client, sends a renewal reminder by text, or places an automated call, the TCPA is in the picture. Here's the plain-terms shape of it, with the caveat that the details vary and change, so confirm them:

• Prior express consent. For many marketing texts and automated calls, you generally need the person's clear, up-front agreement before you contact them that way. A phone number on a quote form isn't automatically consent to be auto-texted.
• Disclose AI voices. If a caller uses an AI-generated voice, rules increasingly expect that to be disclosed to the person on the line. Don't let a client think they're talking to a live person when they aren't.
• Quiet hours. There are limits on when you can contact people. Build those windows into any tool that texts or calls on a schedule.
• Honor opt-outs. When someone replies STOP or asks not to be contacted, that has to actually stop the messages. Make the opt-out easy and make it work.

For general information on the TCPA, the Federal Communications Commission publishes plain-language material at fcc.gov. This is background only -- a licensed professional should confirm how it applies to your agency.

State DOI and producer rules: they vary, so confirm locally

Insurance is regulated state by state through each state's department of insurance (DOI). That means the rules on how you advertise, what you must keep on file, and how a licensed producer may conduct business differ depending on where you're licensed.

Two areas matter most when you add AI. First, advertising: if an AI tool drafts client-facing content or marketing, your state's advertising and unfair-trade-practice rules still apply to it, and someone at your agency should review it before it ships. Second, recordkeeping: states have their own expectations for keeping records of client communications, and an AI-drafted text or call log may fall under them. What's fine in one state may need an extra step in another, so confirm the specifics with your state DOI before you roll anything out.

Client-data protection: the GLBA and state privacy rules

The Gramm-Leach-Bliley Act (GLBA) is the federal law that requires financial businesses, including insurance agencies, to safeguard clients' nonpublic personal information. State privacy laws sit alongside it. When you connect an AI tool to your agency management system or feed it client details, you're handing that protected information to a vendor -- so how the vendor handles it is your concern before you connect, not after.

Get written answers first: where is client data stored and processed, is it used to train the vendor's models, who at the vendor can see it, and what happens to it if you cancel. A vendor built for agencies should answer quickly. For general background on the GLBA, the Federal Trade Commission publishes material at ftc.gov. Confirm your obligations with a licensed professional.

A practical checklist before you turn an AI tool loose

1. Get consent. Before an AI tool texts or auto-calls a client, capture clear consent to contact them that way.
2. Keep proof. Record who consented and when, and store it where you can find it later.
3. Disclose AI callers. If an AI voice answers or places calls, tell the person on the line.
4. Review AI output before a client sees it. A person with authority reads AI-drafted texts, emails, quotes, and marketing before they go out. AI can be confidently wrong.
5. Keep records. Save client communications and call logs the way your state and the GLBA expect.
6. Confirm vendor data handling. Get written answers on storage, model training, access, and deletion before you connect anything.

Treat this as a starting point, not a legal opinion. Your compliance review and a licensed professional set the exact scope for your agency and your state.

Which activities touch which rules?

Common questions

Sources: for general information on the Telephone Consumer Protection Act (TCPA), see the Federal Communications Commission (fcc.gov); for the Gramm-Leach-Bliley Act (GLBA) in general terms, see the Federal Trade Commission (ftc.gov); for state advertising, recordkeeping, and producer rules, see your state department of insurance. Rules vary by state and change over time, and nothing here quotes exact statutory text. This page is general information, not legal, compliance, or insurance advice -- those obligations stay with your agency; confirm the specifics with a licensed professional. Last reviewed: 2026-07-29.