AI Governance
NAIC AI Bulletin: Requirements, States, and Compliance
The bulletin binds insurers only after a state adopts it; Colorado (December 2023), Illinois (November 2024), and California (February 2025) have done so.
Read the post →What is going on in AI, AI governance, privacy, regulation and the conference circuit, in plain language for the people who own AI at their organization. Every post links to its sources.
The bulletin binds insurers only after a state adopts it; Colorado (December 2023), Illinois (November 2024), and California (February 2025) have done so.
Read the post →Classify your AI systems into the EU AI Act's four risk tiers before evaluating any vendor, since your tier distribution determines which features matter most.
Read the post →The NAIC model bulletin requires insurers to maintain a documented AI inventory with named owners and demonstrable controls for examinations.
Read the post →- Discovery and inventory must come before policy, because you cannot classify or govern AI systems you have not found. - Shadow AI is any AI tool, model, or agent used without formal approval, inventory, or a named owner, and it lands in your risk register as an unassessed use case.
Read the post →The news is easier to act on when you know your own gaps. The free Readiness Scorecard is 15 questions.
News and commentary, not legal advice. Check anything you act on against the linked sources and with counsel.