U.S. GAO published a report that examines the benefits and challenges presented by innovative use of technology by insurers. The report identifies new uses of technologies and examines potential benefits and challenges of these technologies for insurers, consumers, and regulators. The report also discusses what stakeholders identified as key challenges that could affect the adoption of new technologies and actions taken to address those challenges.
GAO was asked to provide information on insurtech activities in the property and casualty and life insurance sectors. GAO reviewed available literature, analyzed relevant laws and regulations, and conducted interviews with more than 35 stakeholders, including federal and state regulators, technology companies, insurers, and consumer groups. Stakeholders with whom GAO spoke identified challenges that might affect adoption of innovative technologies. Some stakeholders have raised questions about how certain uses of insurtech could create both risks for consumers and challenges for regulators; another concern is that some of the challenges might slow technological innovation in the insurance sector. The identified challenges include paper-based documentation requirements that do not accommodate online insurance transactions and challenges for regulators in the evaluation of complex rating models.
The National Association of Insurance Commissioners (NAIC), state regulators, and others have initiated a number of actions designed to address industry and regulator concerns associated with insurtech, including any insurance rules and regulations that could affect insurers’ adoption of technologies. Since many of these regulatory initiatives are still in development (or recently developed), their effect on innovation and consumer protection is unknown. It will be important for NAIC and state insurance regulators, as well as the Federal Insurance Office, to continue monitoring developments in these areas. The actions taken by these entities address challenges in areas including evaluation of underwriting methodologies, approvals for new insurance products, customer notification methods and time frames, anti-rebating laws, cyber-security, and regulator skillsets and resources. The following are some examples of the actions that have been initiated:
- State insurance regulators, through an NAIC task force, have been examining regulatory areas that may pose obstacles for innovation, such as requirements for paper documentation or signatures.
- NAIC issued draft best practices for states to use when reviewing complex rating models.
- NAIC adopted a model law that creates a legal framework for states to use to require insurance companies to operate cyber-security programs and protect consumer data.
Specifically, NAIC adopted a model law and states have passed new laws governing cyber-security and data protection to safeguard the increasing amount of personal data used by insurers. In 2017, NAIC had approved the Insurance Data Security Model Law, which outlines planned cyber-security testing, creation of an information security program, and incident response plans for breach notification procedures. The NAIC model law is only a guideline until adopted by individual states, but NAIC noted that in 2018 and 2019, Michigan, Ohio, Mississippi, and Alabama adopted laws based on the NAIC model and additional states have pending legislation.
Keywords: Americas, US, Insurance, Insurtech, Artificial Intelligence, Cyber Risk, Cyber Security, GAO
FDIC is seeking comments on a rule to amend the interagency guidelines for real estate lending policies—also known as the Real Estate Lending Standards.
ISDA is consulting on the implementation of fallbacks for the sterling LIBOR ICE Swap Rate and for the USD LIBOR ICE Swap Rate.
BIS and BoE launched the BIS Innovation Hub Center in London, which is the fourth new Innovation Hub Centre to be opened in the past two years.
ESRB published recommendations on the reciprocation of macro-prudential measures in Belgium, France, Luxembourg, Norway, and Sweden.
SEC announced that the Office of Information and Regulatory Affairs released the Spring 2021 Unified Agenda of Regulatory and Deregulatory Actions.
EC published the Delegated Regulation 2021/931, which supplements the Capital Requirements Regulation (CRR or Regulation 575/2013) with regard to the regulatory technical standards specifying the method for identifying derivative transactions with one or more than one material risk driver.
BCBS is consulting on preliminary proposals for the prudential treatment of cryptoasset exposures of banks.
EBA issued a revised list of validation rules under the implementing technical standards on supervisory reporting.
BIS Innovation Hub, BDF, and SNB announced that, together with a private-sector consortium led by Accenture, they will conduct an experiment using wholesale central bank digital currency (wCBDC) for cross-border settlement.
ESAs published two amended implementing technical standards on the mapping of credit assessments of External Credit Assessment Institutions (ECAIs).