Notifications
Clear all
Topic starter
02/08/2026 9:45 am
TL;DR: The NAIC model bulletin on AI is guidance until states adopt it, but 25 states had formally adopted it by July 2026 and another 8 were in progress, while examiners still expect documented testing, monitoring, and vendor accountability, according to Openlayer. For insurers, the compliance burden is shifting from policy language to auditable evidence that AI systems were tested before deployment and monitored after.
NHIMG editorial — based on content published by Openlayer: AI Model Bulletin: What Insurers Must Prepare for in July 2026
By the numbers:
- As of July 2026, 25 states have formally adopted the NAIC Model Bulletin, with another 8 actively moving through legislative or regulatory approval processes.
Questions worth separating out
Q: Where do AI governance programmes fail when regulators expect examinable evidence?
A: They fail when teams rely on policy documents without versioned test results, decision logs, and named ownership.
Q: Why do third-party AI models still create compliance obligations?
A: Third-party AI does not remove deployer responsibility.
Q: How should insurers test whether AI decisions are unfairly discriminatory?
A: Run subgroup-level adverse impact analysis across protected classes, measure selection rates, and compare them against a defined threshold such as the four-fifths rule.
Practitioner guidance
- Create a state-mapped AI inventory Maintain a live inventory of every underwriting, claims, pricing, and fraud model, then map each system to the states where Bulletin expectations apply or are being enforced informally.
- Require versioned fairness evidence before promotion Block deployment until each model has subgroup-level testing records, threshold definitions, reviewer sign-off, and a version hash tied to the exact artefact promoted.
- Close the look-through gap in vendor contracts Add audit rights, incident notification duties, evidence-sharing obligations, and model documentation requirements to vendor agreements.
What's in the full article
Openlayer's full article covers the operational detail this post intentionally leaves for the source:
- A state-by-state adoption breakdown of the NAIC model bulletin and how those differences affect exam readiness.
- Examples of the exact AIS programme artefacts examiners expect, including inventory records, fairness tests, and reviewer logs.
- A deeper explanation of the AI Systems Evaluation Tool and how it changes what regulators inspect in practice.
- Specific guidance on model promotion gating, audit trail generation, and evidence retention for insurer workflows.
👉 Read Openlayer's analysis of the NAIC AI model bulletin and insurer obligations →
NAIC AI model bulletin: what insurers need to prove in practice?
Explore further
02/08/2026 12:38 pm
AI governance in insurance is becoming an evidence discipline, not a policy discipline. The bulletin does not reward generic statements of intent; it rewards auditable proof that systems were tested, monitored, and controlled. That changes the compliance conversation from who wrote the policy to who can produce the artefacts. For practitioners, the governance model now has to behave like a control system with records, thresholds, and accountable owners.
A question worth separating out:
Q: Who is accountable when an AI model affects a consumer decision under the bulletin?
A: The insurer is accountable, even when the model came from a third party. Regulators expect a named owner or committee with authority to govern the system, monitor outcomes, and act on adverse findings. If authority is unclear, the organisation cannot show effective oversight of the decision process.
👉 Read our full editorial: NAIC AI model bulletin puts insurers on the hook for AI governance
