Rules / Colorado

Regulation 10-1-1: Governance and Risk Management Framework Requirements for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models

In forceRegulationBinding

Requires life, private passenger auto and health-benefit-plan insurers that use external consumer data, algorithms or predictive models to maintain documented governance and risk-management frameworks designed to detect and prevent unfair discrimination. Implements SB 21-169; the 2025 amendment extended it beyond life insurers.

Why it matters

Insurers using AI or third-party data in Colorado underwriting, pricing or claims must document governance, testing and vendor oversight.

What it requires

Bias and non-discriminationData governanceHuman oversightRisk classification
SourceColorado Division of Insurance: https://doi.colorado.gov/announcements/notice-of-adoption-amended-regulation-10-1-1-governance-and-risk-management-framework Checked against the source on 4 Oct 2026. Amended regulation adopted (notice 20 Aug 2025), effective 15 Oct 2025.

Cite this record

Regulation 10-1-1: Governance and Risk Management Framework Requirements for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models. Colorado Division of Insurance. Status: In force. wheresthe.ai, https://wheresthe.ai/rule/us-co-doi-regulation-10-1-1-insurance-ai/ (verified 4 Oct 2026).

Line of Thought

Developments connected to this rule

What has happened that this rule shapes, or that shapes it. Pick one to keep following the thread.

More from Colorado