# Regulation 10-1-1: Governance and Risk Management Framework Requirements for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models

- **Jurisdiction:** Colorado (US-CO)
- **Type:** Regulation · **Status:** In force · **Binding:** yes
- **Issued by:** Colorado Division of Insurance
- **Proposed:** — · **Adopted:** 20 Aug 2025 · **Effective:** 15 Oct 2025
- **Obligations:** Bias and non-discrimination, Data governance, Human oversight, Risk classification
- **Sectors:** Finance

## Summary
Requires life, private passenger auto and health-benefit-plan insurers that use external consumer data, algorithms or predictive models to maintain documented governance and risk-management frameworks designed to detect and prevent unfair discrimination. Implements SB 21-169; the 2025 amendment extended it beyond life insurers.

## Why it matters
Insurers using AI or third-party data in Colorado underwriting, pricing or claims must document governance, testing and vendor oversight.

## Source
[Colorado Division of Insurance](https://doi.colorado.gov/announcements/notice-of-adoption-amended-regulation-10-1-1-governance-and-risk-management-framework)
Checked against the source on 4 Oct 2026. Amended regulation adopted (notice 20 Aug 2025), effective 15 Oct 2025.

## Cite
Regulation 10-1-1: Governance and Risk Management Framework Requirements for Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models. Colorado Division of Insurance. Status: In force. wheresthe.ai, https://wheresthe.ai/rule/us-co-doi-regulation-10-1-1-insurance-ai/ (verified 4 Oct 2026).

---
Canonical page: https://wheresthe.ai/rule/us-co-doi-regulation-10-1-1-insurance-ai/ · Not legal advice.