GAO Report Examines Regulatory Challenges Associated with Insurtech
U.S. GAO published a report that examines the benefits and challenges presented by innovative use of technology by insurers. The report identifies new uses of technologies and examines potential benefits and challenges of these technologies for insurers, consumers, and regulators. The report also discusses what stakeholders identified as key challenges that could affect the adoption of new technologies and actions taken to address those challenges.
GAO was asked to provide information on insurtech activities in the property and casualty and life insurance sectors. GAO reviewed available literature, analyzed relevant laws and regulations, and conducted interviews with more than 35 stakeholders, including federal and state regulators, technology companies, insurers, and consumer groups. Stakeholders with whom GAO spoke identified challenges that might affect adoption of innovative technologies. Some stakeholders have raised questions about how certain uses of insurtech could create both risks for consumers and challenges for regulators; another concern is that some of the challenges might slow technological innovation in the insurance sector. The identified challenges include paper-based documentation requirements that do not accommodate online insurance transactions and challenges for regulators in the evaluation of complex rating models.
The National Association of Insurance Commissioners (NAIC), state regulators, and others have initiated a number of actions designed to address industry and regulator concerns associated with insurtech, including any insurance rules and regulations that could affect insurers’ adoption of technologies. Since many of these regulatory initiatives are still in development (or recently developed), their effect on innovation and consumer protection is unknown. It will be important for NAIC and state insurance regulators, as well as the Federal Insurance Office, to continue monitoring developments in these areas. The actions taken by these entities address challenges in areas including evaluation of underwriting methodologies, approvals for new insurance products, customer notification methods and time frames, anti-rebating laws, cyber-security, and regulator skillsets and resources. The following are some examples of the actions that have been initiated:
- State insurance regulators, through an NAIC task force, have been examining regulatory areas that may pose obstacles for innovation, such as requirements for paper documentation or signatures.
- NAIC issued draft best practices for states to use when reviewing complex rating models.
- NAIC adopted a model law that creates a legal framework for states to use to require insurance companies to operate cyber-security programs and protect consumer data.
Specifically, NAIC adopted a model law and states have passed new laws governing cyber-security and data protection to safeguard the increasing amount of personal data used by insurers. In 2017, NAIC had approved the Insurance Data Security Model Law, which outlines planned cyber-security testing, creation of an information security program, and incident response plans for breach notification procedures. The NAIC model law is only a guideline until adopted by individual states, but NAIC noted that in 2018 and 2019, Michigan, Ohio, Mississippi, and Alabama adopted laws based on the NAIC model and additional states have pending legislation.
Related Links
Keywords: Americas, US, Insurance, Insurtech, Artificial Intelligence, Cyber Risk, Cyber Security, GAO
Related Articles
EU Amends CRD4 and CRD5 as Part of Capital Markets Recovery Package
EU published Directive 2021/338, which amends the Markets in Financial Instruments Directive (MiFID) II and the Capital Requirements Directives (CRD 4 and 5) to facilitate recovery from the COVID-19 crisis.
EU Committee Recommends Systemic Risk Buffer of 4.5% in Norway
The Standing Committee of the European Free Trade Association (EFTA) recommended that a systemic risk buffer level of 4.5% for domestic exposures can be considered appropriate for addressing the identified systemic risks to the stability of the financial system in Norway.
PRA Clarifies Approach to Onshoring of Credit Risk Rules for UK Banks
In a recent statement, PRA clarified its approach to the application of certain EU regulatory technical standards and EBA guidelines on standardized and internal ratings-based approaches to credit risk, following the end of the Brexit transition.
FSB Sets Out Work Priorities for 2021
In a recently published letter addressed to the G20 finance ministers and central bank governors, the FSB Chair Randal K. Quarles has set out the key FSB priorities for 2021.
EU Publishes Corrigendum to Revised Capital Requirements Regulation
EU published, in the Official Journal of the European Union, a corrigendum to the revised Capital Requirements Regulation (CRR2 or Regulation 2019/876).
ESAs Issue Statement on Application of Sustainability Disclosures Rule
ESAs published a joint supervisory statement on the effective and consistent application and on national supervision of the regulation on sustainability-related disclosures in the financial services sector (SFDR).
EC Consults on Crisis Management and Deposit Insurance Frameworks
EC published a public consultation on the review of crisis management and deposit insurance frameworks in EU.
HKMA Enhances Loan Guarantee Scheme to Alleviate Pressure on SMEs
HKMA announced that enhancements will be made to the Special 100% Loan Guarantee of the SME Financing Guarantee Scheme (SFGS) and the application period will be extended to December 31, 2021.
EBA Proposes Standards for Supervisory Cooperation Under IFD
EBA launched consultations on the regulatory and implementing technical standards on cooperation and information exchange between competent authorities involved in prudential supervision of investment firms.
BoE Addresses Banks in Scope of First Resolvability Assessment
BoE issued a letter to the CEOs of eight major UK banks that are in scope of the first Resolvability Assessment Framework (RAF) reporting and disclosure cycle.