The Public-Record Request: Using State Sunshine Laws to Pry Loose Insurance Denial Data

Dear Records Custodian: Under the New Jersey Open Public Records Act, N.J.S.A. 47:1A-1 et seq., I request the following records in the custody of the Department of Banking and Insurance: (1) all consumer complaint records filed against [carrier] from January 1, 2023 to the present, including disposition, category, dollar amount in dispute, and time to resolution; (2) all enforcement actions, fines, and consent orders issued to [carrier] during the same period; (3) the agency's annual market-conduct examination reports for [carrier] for calendar years 2023, 2024, and 2025. The letter ran one page. It was signed by a 39-year-old physician assistant in Cherry Hill whose six-year-old daughter's specialty enzyme-replacement therapy had been denied four times in eleven months by a fully insured commercial plan. She mailed it certified, return receipt requested, on a Tuesday in early February. The Department's response, returned twenty-three business days later, ran forty-eight pages and listed 1,247 distinct complaint records filed against the carrier in the preceding twenty-five months, with disposition codes that resolved into a single finding the carrier's own marketing did not advertise: 31 percent of pediatric specialty-drug coverage complaints had been resolved in favor of the consumer after intervention. She attached the relevant page to her fifth appeal. The denial reversed in nineteen days.

The pattern is mostly invisible. Every state has a public-records statute. Every state's insurance regulator collects complaint data, enforcement records, and market-conduct reports on its carriers, and most of that material is a public record. The patient who knows how to request it converts a one-sided argument about a single claim into a two-sided argument that includes the carrier's own regulatory history. The carrier knows what the file says. Until the patient asks, the patient does not.

The federal-state architecture

The federal Freedom of Information Act, 5 USC 552, governs records held by federal agencies. It does not reach insurance carriers directly; the McCarran-Ferguson Act, 15 USC 1011-1015, leaves the regulation of insurance to the states. The FOIA does reach records held by federal agencies that interact with insurance: CMS for Medicare Advantage and Marketplace plans, DOL for ERISA, OPM for FEHB, and CDC for relevant public-health data. Records on a specific carrier are subject to FOIA exemptions, particularly Exemption 4 (trade secrets and confidential commercial information) and Exemption 6 (personnel and medical files).

The state public-records statutes are the parallel framework and the more useful tool for most insurance disputes. Every state has one. The names vary: New Jersey's OPRA, Texas's Public Information Act, California's Public Records Act, Florida's Sunshine Law, Pennsylvania's Right-to-Know Law. The scope, exemptions, custodian designation, and fee structure vary. The substantive principle is uniform: records held by state agencies, including state insurance regulators, are presumptively public unless an exemption applies.

The third layer is the carrier's own published material. SEC 10-K filings contain disclosures on litigation, regulatory matters, and material reserves. The NAIC's Consumer Information Source aggregates state complaint data at content.naic.org/consumer.htm. CMS star ratings, MA enforcement actions, and OIG audit reports are public-record material available without a formal request.

The three categories that are usually public

The three categories most relevant to a denial appeal, usually obtainable through a state records request, are consumer complaint records, enforcement actions and consent orders, and market-conduct examination reports.

Consumer complaint records are the most reliably public. Every state insurance regulator collects complaints, codes them by category (claim handling, marketing, underwriting, policyholder service), tracks disposition, and reports aggregates to the NAIC. Whether individual records are released and in what form depends on state law. Some states release them with consumer identifiers redacted; some release only aggregates; some require a formal request for case-level detail. The state attorney general's records-act guide is the operative reference.

Enforcement actions and consent orders are the second category. When a regulator finds a carrier in violation, it can issue an administrative order: fine, consent decree, corrective action plan, market-conduct directive, or license restriction. These are typically public records, frequently posted to the regulator's website, and constitute the single most concentrated source of public information on a carrier's regulatory pattern.

Market-conduct examination reports are the third. State regulators periodically conduct formal audits of carriers' claims handling, underwriting, marketing, and policyholder service. The reports document findings and recommend corrective action; they are typically public records once finalized, with redactions for confidential commercial information. The NAIC's Market Conduct Annual Statement framework standardizes much of this. The state agency's website is the first source; a formal request reaches the unredacted final report where the website posts only summaries.

Three records that are usually not public

Carrier-filed medical policy bulletins, where submitted to the regulator, are often treated as confidential commercial information; the bulletins themselves are typically available on the carrier's provider portal without a records request.

Individual claim files for other patients are protected under state health-privacy laws and public-records exemptions for personnel and medical records. The patient can obtain her own file via HIPAA but cannot use a public-records statute to obtain another patient's file.

The carrier's internal communications, where provided to the regulator, are frequently subject to deliberative-process analogues. The exemption is contested in many states; some release more than others.

What the records request actually requires

The request that returns useful material has eight elements (statutory citation, custodian designation, carrier identification with NAIC company code, date range, specific record categories, format preference, fee ceiling, signature and contact). It goes certified mail return receipt or through the state's electronic portal. Response windows run 5 to 30 business days, with extensions for unusual circumstances. The state attorney general's records-act guide is the operative reference and varies enough state to state that a request drafted to one state's statute does not work in another. Apellica drafts records requests for cases where the regulator's public record will strengthen the appeal.

Why this is harder than it looks

State public-records statutes look uniform from a distance and fragment up close. California's CPRA, Texas's PIA, Florida's Sunshine Law, New York's FOIL, Pennsylvania's RTKL, New Jersey's OPRA, Illinois's FOIA, the federal FOIA all have different scope, different exemptions, different fee structures, and different deadlines. A request that names the wrong statute or skips the citizenship declaration gets bounced. The mapped library Apellica has catalogued (more than two hundred carrier-by-denial-type cells, indexed at the bulletin level) each tie to a different state regulator's complaint history, and the NAIC Complaint Index for a carrier doing business in fifty states moves market by market.

The records that return are often dozens to hundreds of pages. The appeal is not improved by attaching the file; it is improved by extracting two or three numbers and a citation and writing the sentence that lands them. Building that extract is forensic regulatory reading, not a task most patients have done before. Procedural exhaustion missteps on the underlying appeal continue to run while the records request is pending.

The carrier knows what its complaint file says. Until the patient asks the regulator for it, the patient does not.

What Apellica does that you can't

The senior-reviewer desk runs an internal index of more than two hundred carrier-by-denial-type cells and pair it with the NAIC Complaint Index, the state DOI enforcement record, and the market-conduct examination findings for each carrier in each state. The desk drafts records requests under the correct state statute, extracts the two-or-three-sentence pattern statement that lands in the appeal, and attaches the right exhibits without burying the substantive merits argument under regulatory paper.

Same-day appeal letters go out with the merits argument intact and the regulator's pattern data folded in as supporting context. Apellica's senior reviewers build the four-part evidence stack, plan-language citation, clinical facts, peer-reviewed evidence, regulatory hook, for every case. A senior reviewer reads every appeal before it goes out.

Initial review is free. There is no upfront fee. Patients are not asked to pay anything until the carrier reverses the denial.

Exhibit 1: State public-records statutes for insurance regulators, selected jurisdictions

Action title: Every state has a statute. The names vary. The response windows vary. The exemptions vary. The presumption of openness does not.

| State | Statute | Citation | Typical response window | |---|---|---|---| | California | California Public Records Act | Cal. Gov. Code Section 7920 et seq. | 10 days, with extensions | | Texas | Public Information Act | Tex. Gov. Code ch. 552 | 10 business days | | Florida | Sunshine Law / Public Records Act | Fla. Stat. ch. 119 | "Reasonable time," generally 10-30 days | | New York | Freedom of Information Law | N.Y. Pub. Off. Law Section 84 et seq. | 5 business days acknowledgment | | Pennsylvania | Right-to-Know Law | 65 P.S. Section 67.101 et seq. | 5 business days acknowledgment | | New Jersey | Open Public Records Act | N.J.S.A. 47:1A-1 et seq. | 7 business days | | Illinois | Freedom of Information Act | 5 ILCS 140/1 et seq. | 5 business days | | Federal | Freedom of Information Act | 5 USC 552 | 20 business days |

State citations and timeframes verified against current statutory text as of mid-2026; confirm against the state agency's published records-act guide before filing.

Exhibit 2: What to ask for, by document type

Action title: The request that returns useful material is specific. "All records about [carrier]" returns nothing or a fee estimate the patient will not pay. Naming the document type narrows the response.

| Category | Specific records to request | What it produces | |---|---|---| | Consumer complaints | Complaint records against [carrier], [date range], with category and disposition | Pattern of denials, claim-handling complaints, resolutions | | Enforcement actions | Fines, consent orders, corrective action plans against [carrier], [date range] | Regulatory record, settlements, remediation requirements | | Market-conduct exams | Final market-conduct exam reports for [carrier], [date range] | Audit findings, claims-handling deficiencies, recommendations | | Filings | Rate and form filings, actuarial memoranda for [carrier], [product type] | Carrier's representations on coverage scope and underwriting | | Annual statements | Annual financial statements and MCAS filings | Reserves, claims-paid totals, complaint ratios |

Exhibit 3: The complaint-data math

Action title: A single number from the complaint file changes the conversation. The carrier's denial letter implies its decision is routine; the complaint file shows the regulator has logged hundreds or thousands of objections to the same routine.

| Number to extract | What it means in an appeal | |---|---| | Total complaints against carrier, last 3 years | Scale of regulatory record | | Complaints in the patient's category | Pattern relevant to the appeal | | Percent resolved for consumer after intervention | Regulator's view of compliance | | NAIC complaint-index ratio | Whether complaint rate exceeds industry norm | | Recent enforcement actions and consent-order summaries | Whether the carrier has been formally cited |

The NAIC Complaint Index compares carrier complaints to premium volume, with the industry average set at 1.0. A carrier at 2.0 is generating complaints at twice the industry rate. It is at content.naic.org/consumer.htm and requires no records request.

How the records move into the appeal

The appeal is not improved by attaching forty-eight pages of complaint records. It is improved by extracting two or three numbers and a citation.

The complaint-pattern sentence: "DOI complaint records, obtained under [state statute], document [number] consumer complaints in the [category] against this carrier in the [period], with [percentage] resolved in favor of the consumer after regulator intervention."

The enforcement-action sentence: "On [date], the [regulator] issued a consent order to this carrier, [order number], finding [finding] and requiring [corrective action]."

The market-conduct sentence: "The [date] market-conduct exam report identified the following deficiencies in the carrier's claims handling: [summary]. The same deficiency appears in the present claim."

Two or three sentences, two or three exhibits attached. The appeal panel reads knowing the regulator has been asked the same questions before.

Where the regulations help and where they do not

The state public-records statute is the operative tool for state-regulated fully insured plans. For ERISA self-funded plans, the federal FOIA does not reach the plan, and the state statute reaches the carrier acting as TPA only to the extent the regulator has records on the carrier in that capacity. ERISA participants have a parallel and stronger document right under 29 CFR 2560.503-1(h)(2)(iii) for their own claim.

The federal FOIA reaches CMS, DOL, OIG, and other federal agencies. A FOIA request to CMS for MA enforcement actions, or to OIG for audit material on a carrier, will produce useful records on a federal-program basis. The portal is at foia.gov.

The records request is a tool inside the appeal, not a substitute for it. The appeal still has to argue the merits, cite the policy, present the clinical case, and meet the deadlines. The records provide the institutional context that turns the merits argument into a stronger one.

Where to ask for help

The state Department of Insurance's consumer affairs office handles complaints and provides the records contact. The state attorney general's office publishes the records-act guide and, in most states, accepts complaints when an agency refuses to comply. The Reporters Committee for Freedom of the Press at rcfp.org publishes a state-by-state guide that is the most-used practitioner reference. The National Freedom of Information Coalition at nfoic.org maintains state-level resources.

The federal FOIA portal at foia.gov links to each agency's FOIA office. The NAIC Consumer Information Source at content.naic.org/consumer.htm is the first stop for aggregate complaint data on any carrier.

Apellica, at apellica.com, prepares appeal letters and incorporates public-records material where it strengthens the case.

What to do if you have a denial right now

The records request is a tool inside the appeal, not a substitute for it. The merits argument has to land first; the regulator's pattern data lands second.

Most patients leave coverage on the table because the appeal plus records-request sequence is more procedural work than they can take on.

The Cherry Hill PA's fifth appeal arrived with a single-page exhibit drawn from the 1,247-complaint regulator file. The carrier reversed in nineteen days. The previous four appeals, on identical clinical merits, had failed without that page.

How Apellica engages a case

Apellica prepares evidence-based appeal letters across Medicare Advantage, ACA, ERISA, Medicaid managed-care, and traditional Medicare, and incorporates public-records material where it strengthens the case. The patient reviews and approves every word before submission and authorizes carrier communications under a HIPAA-compliant Assignment of Benefits. We are not a law firm, medical provider, or insurance carrier.

Our model is $0 upfront and a flat fee on successful recovery. Coverage in all 50 states. A senior reviewer reads every case.

About the author

Mark Henderson is a senior reviewer at Apellica (apellica.com), an independent insurance appeal preparation service headquartered at One World Trade Center, Suite 8500, New York, NY 10007. Apellica is not a law firm and does not provide legal advice. Coverage across all 50 states. Contact: press@apellica.com, +1 (888) 777-6120.

References

• 5 USC 552. Federal Freedom of Information Act.
• 15 USC 1011-1015. McCarran-Ferguson Act.
• 29 CFR 2560.503-1(h)(2)(iii). ERISA document-disclosure right (for contrast).
• State public-records statutes: Cal. Gov. Code Section 7920 et seq.; Tex. Gov. Code ch. 552; Fla. Stat. ch. 119; N.Y. Pub. Off. Law Section 84 et seq.; 65 P.S. Section 67.101 et seq.; M.G.L. ch. 66 Section 10; N.J.S.A. 47:1A-1 et seq.; 5 ILCS 140/1 et seq.; R.C. 149.43.
• NAIC, Consumer Information Source. content.naic.org/consumer.htm.
• NAIC, Market Conduct Annual Statement framework.
• Reporters Committee for Freedom of the Press, state-by-state public-records guide. rcfp.org.
• National Freedom of Information Coalition. nfoic.org.
• Federal FOIA portal. foia.gov.
• CMS, Medicare Advantage enforcement actions, public file.
• HHS Office of Inspector General, audit and inspection reports.
• State attorney general public-records-act guides (varies by state, current edition).