Look at page 4 of the Final Rules that cam out on Wednesday. The second paragraph on the page says that Section 326 (the CIP Rules) applies to all "financial institutions". Further along in that paragraph it identifies insurance companies as being one of the entities covered. Additionally you might check 31 USC 5312(a)(2) and (c)(1)(A).