If you have California residents and you share their personal information with a vendor with whom you have a joint marketing arrangement for purposes of marketing insurance products, what are your privacy policy notification requirements. For example, is it "For joint marketing with other financial companies" because it is considered a financial product? Or is it "For non-affiliates to market to you."

If this falls under the "for non-affiliates to market to you", does it require an opt in or an opt out for CA residents?

Or is insurance considered a financial product and therefore is an opt out?