It seems to be regulated at the state level. A quick web search shows that Washington state's insurance commissioner issued an emergency rule prohibiting insurers from using credit scores to set rates for 3 years. This was just issued in March in anticipation of temporary similar Federal COVID-driven legislation expiring. So apparently it's still being used, the Fed has just put a temporary stay on it.