Careers

Diversity

With 18 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Efforts to Expand Mini-WARN Acts’ Requirements Underscore the Importance of Knowing State-Level, Post-Sale Obligations Relating to a Plant Closing or a Mass Layoff

BakerHostetler Named a Top-Performing Lobbying Firm for Seventh Consecutive Year

IP Intelligence Report

Celebrating World IP Day 2025: Music, Innovation, and Intellectual Property

Sara Goldstein Speaks on “Fireside Chat with a Cybersecurity Defense Attorney” at GPSEC

States Continue to Develop Law and Guidance in This Area

core/heading

NAIC Model Bulletin on AI Adoption: NAIC adopts a model bulletin on AI use in insurance, providing guidance to state regulators. The bulletin calls on insurers to implement specific controls, emphasizing responsible AI use and adherence to state laws on unfair trade practices and claims settlement.

core/list-item

Standards for AI Programs: Model bulletin outlines standards for insurers' AI programs, including validation, testing, and retesting of AI systems.

Statewide AI Regulations: Various states, including Colorado and California, are adopting regulations and guidance addressing AI in insurance.

core/list

On December 4, the National Association of Insurance Commissioners unanimously adopted a model bulletin on the use of artificial intelligence in insurance.&nbsp; The <a href="https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf">model bulletin</a> is intended for use by state insurance regulators to establish expectations for how insurers will develop and use AI technologies in a manner consistent with state law, including laws addressing unfair trade practices and unfair claims settlement practices.&nbsp; The model bulletin will be effective in any particular state only if it is adopted by that state and would apply to any insurer holding a certificate of authority to do business in the state.&nbsp;

core/paragraph

The model bulletin is unique insofar as it calls on insurers to implement a number of specific controls to mitigate the risk that consumers will be adversely affected by the use of AI in a manner that violates state law.&nbsp; Specifically, the model bulletin states that insurers are expected to develop and maintain a written program for the responsible use of AI systems.&nbsp; The model bulletin also encourages insurers to use verification and testing methods “to identify errors and bias” and the potential for unfair discrimination in predictive models and other AI systems.

Standards set forth by the model bulletin for a written program addressing the use of AI include the following:

The program should address governance, risk management controls and internal audit functions.

The program should vest responsibility for oversight of the program with senior management accountable to the insurer’s board or an appropriate committee of the board.

The program should be tailored to and proportionate with the insurer’s use of AI, taking into account the degree of potential harm to consumers that could result.

The model bulletin states that the risk management controls established by an insurer’s AI program should include, among other things, standards for validating, testing and retesting AI systems as necessary to assess their outputs and standards for evaluating the suitability of data used to train, validate and audit such systems.&nbsp; It also states that the program should address processes for assessing data and AI systems provided by third parties.&nbsp;

The model bulletin arrives at a time when more and more states are adopting standards regarding the use of AI in insurance, including the following:

A <a href="https://admin.bakerlaw.com/wp-content/uploads/2023/12/DOC-B-COLORADO-REGULATION.pdf" target="_blank" rel="noreferrer noopener">regulation</a> adopted by the Colorado Division of Insurance in September 2023 requiring life insurers to using external consumer data and information sources (ECDIS) to implement a governance and risk management framework design to prevent unfair discrimination and a <a href="https://admin.bakerlaw.com/wp-content/uploads/2023/12/DOC-C-CPPA-REGULATIONS-1.pdf" target="_blank" rel="noreferrer noopener">proposed regulation</a> requiring life insurers using ECDIS to test for unfair discrimination and disparate impact by race and ethnicity.

<a href="https://cppa.ca.gov/meetings/materials/20231208_item2_draft.pdf" target="_blank" rel="noreferrer noopener">Draft regulations</a> issued on November 27, 2023 by the California Privacy Protection Agency (CPPA) regarding automated decision making technology (ADMT) provide that businesses using ADMT must provide California residents with notices of a right to opt out of that use where such use involves personal information, and a right to access information regarding the use of ADMT prior to uses of any ADMT. These may align with other state privacy laws, including the Colorado <a href="https://coag.gov/resources/colorado-privacy-act/">Privacy Act</a> (CPA) [link to privacy law] that provides a right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer.

A <a href="https://admin.bakerlaw.com/wp-content/uploads/2023/12/BULLETIN-2022-5-Allegations-of-Racial-Bias-and-Unfair-Discri.pdf" target="_blank" rel="noreferrer noopener">bulletin</a> issued by the California Insurance Commissioner on June 30, 2022 expressing concern that the use of AI technologies and “Big Data” by insurers could lead to unfair discrimination and instructing insurers to review their practices in this area and a similar <a href="https://portal.ct.gov/-/media/CID/1_Notices/Technologie-and-Big-Data-Use-Notice.pdf">bulletin</a> issued by the Connecticut Insurance Department on April 20, 2022.

Plans announced by the New York Department of Financial Services (NYDFS) to issue a Circular Letter setting forth best practices for insurers using AI and clarifying questions arising from a <a href="https://www.dfs.ny.gov/industry_guidance/circular_letters/cl2019_01#:~:text=An%20insurer%20should%20not%20use,violence%2C%20past%20lawful%20travel%2C%20or">Circular Letter </a>issued by the NYDFS on January 18, 2019 expressing concern that the use of external data, algorithms and predictive models to underwrite life insurance could lead to unfair discrimination and a lack of transparency to consumers and setting forth certain guidelines for the use such data and methods.

BakerHostetler’s Insurance Transactions and Regulatory Practice Group and our multi-disciplinary <a href="https://www.bakerlaw.com/services/artificial-intelligence-ai/">AI Practice</a> are actively tracking legal developments affecting the use of AI by insurers and other industries and advising clients on how to navigate regulatory requirements and mitigate litigation risk.&nbsp; For more information, please contact your BakerHostetler relationship attorney.

NAIC Adopts Model Bulletin on Artificial Intelligence

Featured Insights

Related Services

Featured Insights