The pain

Insurance is one of the most heavily regulated industries for AI — and the penalties for non-compliance are severe. Your models touch credit decisions, health data, and employment outcomes simultaneously.

ECOA / Reg B Fair Lending (HMDA) HIPAA + AI State AI Acts

Laws that likely apply to you

  • ECOA / Regulation B — adverse action notices required for AI credit/underwriting decisions
  • Fair Lending (HMDA) — disparate impact analysis for AI lending models
  • HIPAA + AI — PHI in training data requires BAA and de-identification
  • NAIC AI model bulletin — adopted in 20+ states: a written AI systems program, vendor oversight and documentation, examinable in market conduct exams
  • NY DFS Circular Letter 2024-7 — proxy and bias testing for AI and external consumer data in underwriting and pricing, with annual testing and board oversight
  • Colorado SB 21-169 — quantitative testing of external data and algorithms, plus an annual attestation to the Division of Insurance

What we do

We help insurance companies map their AI obligations, build governance programs, and prepare for audits. Our assessment tool shows exactly which laws apply to your organization.

Take the Assessment

Last verified:

Informational only — not legal advice. Consult qualified counsel for binding guidance.