Insurance AI regulation, governance and compliance · Future AI in Insurance Series
IAIS Principles for Supervising AI in Insurance
What risk-based and proportionate AI supervision means for insurer governance, fairness, security and customer outcomes.
Why this issue matters now
Global insurers face varied local rules but common supervisory expectations around accountability, robustness and fair treatment. AI regulation, model drift, cyber threats, climate change and changing customer expectations can transmit quickly from a technical problem into financial loss, unfair outcomes or regulatory failure. A sound assessment therefore connects the insurance decision with the product, customer, data, model, human process and legal obligation.
The objective is not to predict every disruption. It is to make uncertainty visible, identify material dependencies and define action before pressure removes the time to decide. Historical averages remain useful, but they should be challenged when the current environment differs from the period that produced the data.
A practical analytical framework
Map Insurance Core Principle obligations to every material AI use, document proportionality and maintain evidence that supervisors can test. The analysis should separate evidence, assumptions and judgement. Inputs need clear ownership, dates and lineage; models require validation and monitoring; expert adjustments need a reason, duration, approval and subsequent review.
This expression is intentionally simple. It prevents teams from discussing a score without asking which decision is affected, how the system may fail, who may be harmed and whether the same dependency is shared across products. The calibration will vary by product and institution, but the decision logic should remain traceable.
Future insurance scenario
A group deploys one underwriting model across markets with different data and consumer profiles; local outcomes require separate monitoring. Management should consider direct and second-order effects through customers, models, vendors, operations, capital and public policy. Scenario design should avoid double counting while preserving plausible dependencies between technology failure, conduct harm and financial loss.
Controls and evidence
- Define risk appetite, limits, approval rights and escalation thresholds.
- Verify data provenance, model purpose, affected customers and material dependencies.
- Monitor model performance, data drift, overrides, incidents, customer outcomes and regulatory change.
- Document data sources, assumptions, overrides, exceptions and management actions.
- Back-test outcomes and revise the framework when evidence shows drift or control weakness.
Frequently asked questions
Does high model accuracy mean low risk?
No. Accuracy is only one property. An AI system can be accurate on average yet unsafe, unfair, insecure, poorly calibrated or unsuitable for the decision where it is used.
How should AI enter an insurance decision?
Through a defined purpose, validated evidence, controlled deployment and monitoring linked to the insurance outcome. It should not be introduced as an opaque score without an accountable decision process.
Who is responsible for the final decision?
The accountable institution and its authorised decision-makers remain responsible. Data, models and AI can support judgement but do not remove governance or legal duties.
Author
Jonas Adam Mohamed Osman, known as Jonas Osman, writes independent educational analysis on banking, quantitative risk, compliance, geopolitics and future financial systems.