On Monday, February 13, 2023, Eric Dinallo and Marshal Bozzo of the firm’s Insurance Regulatory Group and Avi GesserErez Liebermann and Anna Gressel of the Data Strategy and Security Group discussed the latest developments on AI insurance regulation in Colorado.

This was the latest installment in Debevoise’s series of webcasts focused on developments affecting the insurance industry; it covered the following:

  • Key takeaways from the Colorado Insurance Division’s February stakeholder meeting on SB 21-169, including forthcoming regulations concerning AI governance and testing;
  • The likely requirements under SB 21-169 for data governance, risk management and reporting, including:
    • Inventory of AI models
    • Governing principles
    • Board and senior management reporting and oversight
    • Cross-functional governance committee
    • AI policies and procedures to ensure that the models are not biased
    • AI training
    • Cybersecurity for models
    • AI incident response plan
    • Documentation of bias assessments
    • Mandatory reporting on compliance
    • AI and Big Data regulatory developments from the National Association of Insurance Commissioners and state authorities.

If you missed the discussion, please click here to listen to the recorded program.

If you missed the last briefing on Colorado’s Approach to AI Governance for Insurers, please click here to access the on-demand recording.

Author

Eric R. Dinallo is Chair of the Debevoise insurance regulatory practice and a member of its Financial Institutions and White Collar & Regulatory Defense Groups in New York. He can be reached at edinallo@debevoise.com.

Author

Marshal Bozzo is a regulatory counsel based in the New York office and a member of the Debevoise Insurance Regulatory practice. He can be reached at mlbozzo@debevoise.com.

Author

Avi Gesser is Co-Chair of the Debevoise Data Strategy & Security Group. His practice focuses on advising major companies on a wide range of cybersecurity, privacy and artificial intelligence matters. He can be reached at agesser@debevoise.com.

Author

Erez is a litigation partner and a member of the Debevoise Data Strategy & Security Group. His practice focuses on advising major businesses on a wide range of complex, high-impact cyber-incident response matters and on data-related regulatory requirements. Erez can be reached at eliebermann@debevoise.com

Author

Anna R. Gressel is an associate and a member of the firm’s Data Strategy & Security Group and its FinTech and Technology practices. Her practice focuses on representing clients in regulatory investigations, supervisory examinations, and civil litigation related to artificial intelligence and other emerging technologies. Ms. Gressel has a deep knowledge of regulations, supervisory expectations, and industry best practices with respect to AI governance and compliance. She regularly advises boards and senior legal executives on governance, risk, and liability issues relating to AI, privacy, and data governance. She can be reached at argressel@debevoise.com.