Legal

Data Requests

Last updated: July 31, 2026

Notice to Consumers

This page sets out the policy Control Source, Inc. has adopted for responding to “consumer data access requests” (CDARs) as applicable under certain state and federal consumer protection legislation. We will respond to all consumer data access requests consistent with applicable federal law and the state law that applies to the requester’s state of residency at the time of the request.

A consumer data access request is a written request for personal information (personal data) held about you. Consumer protection legislation gives individuals the right to know what information is held about them, though this right is subject to certain exemptions.

When we receive a consumer data access request, we will first check that we have enough information to be sure of your identity. Often we will have no reason to doubt a person’s identity — for example, if we have regularly corresponded with them. However, if we have good cause to doubt your identity, we can ask you to provide evidence we reasonably need to confirm it. We will gather any manual or electronically held information and identify any information provided by, or that identifies, a third party. If we identify information relating to a third party, we will ask them whether there is any reason it should not be disclosed; we do not have to supply that information to you unless the third party consents or it is reasonable to do so without consent. If the third party objects, we may seek legal advice on reasonable next steps.

We will deal with your request without undue delay and within 30 days of receipt. If the work involved is particularly complex, or if numerous requests are made, we may extend this period by up to an additional 60 days — in which case we will inform you of the extension and the reasons for it. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, or if you request paper copies (in which case mailing and shipping costs will apply and be charged in advance). Certain state and federal laws govern how many consumer data access requests may be made per individual annually and what charges may apply.

We will explain what steps we have taken in dealing with your request, including the source of the personal information gathered, and will provide the information in a concise, transparent, and easily accessible form — in a convenient electronic format, or by other means when necessary. There are a number of exemptions to our duty to disclose personal data, and we may seek legal advice if we believe one might apply (for example, information covered by legal professional privilege or law enforcement requirements). If we agree that information is inaccurate, we will correct it and, where practicable, destroy the inaccurate information. If we do not agree, or are unable to decide, we will note the alleged error and keep it on file; if you are not satisfied with our response, you may seek recourse through our internal complaints procedure.

Because Control Source, Inc. partners with CBC Benefit & Insurance Services for compliance processing, consumer data access requests are handled by their dedicated Data Protection Coordinator:

Brandon Russell — Data Protection Coordinator
300 S. Fourth St., Ste. 700
Las Vegas, NV 89101
Phone: 800.309.9029

Consumer Data Access Request Form

Complete this form if you would like assistance with an information request under HIPAA or applicable state legislation as it pertains to personal data held and/or used by Control Source, Inc. or CBC Benefit & Insurance Services (together, the “Company”). We will endeavor to respond promptly, and in any event within 30 days of the latest of: our receipt of your written request, or our receipt of any further information we ask you to provide to comply with your request.

The information you supply will only be used to identify the personal data you are requesting and to respond to your request. Requests covered under state or federal legislation will only be accepted by written request, including via this form. While this specific form is not required, providing the information requested will likely result in more efficient processing.

Section 1: Details of the Person Requesting Information

Full legal name

Street address

City

County

State

ZIP code

Phone

Section 2: Are You the Data Subject?

Please select the option that applies, and read the instructions that follow it.

Yes — I am the data subject. (Continue to Section 4 below.) No — I am acting on behalf of the data subject. (Please complete Section 3.)

Prior to releasing any information, the Company will make every reasonable effort to validate the identity of the data subject or the data subject’s delegate, typically by a follow-up phone call to the phone number on file for the data subject. Data provided in this form will not itself be used for identity validation. If we are unable to validate identity to a reasonable level of comfort, we reserve the right to refuse the request; you are entitled to submit another request if your initial request is denied for any reason.

Section 4: What Information Are You Seeking?

Please describe the information you are seeking, including any relevant details that will help us identify it.

If the information you request reveals details directly or indirectly about another person, we will need that person’s consent before we can provide it. In certain circumstances, where disclosure would adversely affect the rights and freedoms of others, we may not be able to disclose the information, and you will be informed promptly with the reasons. We reserve the right, consistent with applicable state and federal law, to decline to provide copies where doing so would take “disproportionate effort” or where a request is “manifestly unfounded or excessive” — but we will make every effort to provide a satisfactory form of access or summary where suitable.

Details of your request

Section 5: Information About the Collection and Processing of Data

If you want information about any of the following, please check the applicable boxes:

What personal information the Company holds about me. What personal information the Company collects about me. Whether my personal information is being sold, and to whom. Request a change or amendment to my personal information. Restrict uses and disclosures of my personal information.

Section 6: Declaration

Please note that any attempt to mislead, or to illegally request the protected information of another individual, may result in prosecution under applicable U.S. state and federal laws.

I confirm that I have read and understood the terms of this form, and I certify that the information given in this application is true. I understand that the Company may need to confirm my identity (or the data subject’s identity) and may need additional information to locate the correct personal data. I understand that the Company will always err on the side of data privacy and personal protection, and that if I am unable to adequately validate my identity or my right to receive the requested data, my request may be denied.

Signature (type your full name)

Date

Thanks! Your email app should now have a message addressed to our Data Protection Coordinator with your request details — just hit send. If it didn’t open, email InfoRequest@cbcins.com directly or call 800.309.9029.

Other Ways to Submit a Request

If you would rather not use the form above, you may fax a completed request to 1.855.450.1188 or email it to our Company Data Protection Coordinator at InfoRequest@cbcins.com. You can also call 800.309.9029 with any questions about the process.

Correcting Information

If, after receiving the information you requested, you believe that: the information is inaccurate or out of date; we should no longer be holding that information; we are using your information for a purpose of which you were unaware; or we may have passed inaccurate information about you to someone else — please notify our Data Protection Coordinator at once using the contact details above.