Insurance
AI compliance in insurance
Compliance does not stop at the edge of the technology. If AI makes a decision, that decision must comply with the same rules as a human one. Most boards have not thought about what that means.
Every decision an insurance business makes must comply with the law. That does not change because a machine made it. If an AI system prices a policy unfairly, the business is liable. If it settles a claim wrongly, the business is liable. If it discriminates, the business is liable.
This guide explains what AI compliance means for insurance boards, what the regulators are doing, and where compliance breaks.
What compliance means with AI
Compliance is doing what the law requires. With AI, it is doing what the law requires even though the decision was made by a system that no human fully understands.
That creates three problems. Traceability. You must be able to trace why a particular decision was made, for a specific customer, a specific policy, a specific claim. Fairness. The decision must not discriminate. Accountability. Someone must be responsible.
"21% of organisations have no AI governance at all, and governance and risk is the fastest growing barrier to adoption."
Source: Deloitte, State of AI in the EnterpriseGovernance is the fastest growing barrier because organisations are discovering, too late, that compliance with AI is not optional.
What the regulators are doing
The JFSC issued AI governance guidance in July 2026. The GFSC and the EU AI Act are moving in the same direction. Boards are accountable. The technology is not an excuse.
The JFSC guidance requires boards to understand the decisions AI makes, who is responsible, and how they are supervised. The EU AI Act classifies AI systems by risk. Insurance pricing and claims decisions face stricter requirements. Transparency, explainability, and documentation are all required.
"61% of CEOs say boards are rushing AI transformation, and around 40% of boards lack an informed view of how AI changes growth strategy."
Source: BCG, CEOs and Boards are aligned on AI in theory but divided in practiceBoards are rushing without an informed view of how AI changes growth strategy. That includes how it changes compliance obligations.
Where compliance breaks
Compliance breaks in three places.
The decision itself. The system makes a decision that breaches a rule. A pricing decision that discriminates. A claims decision that ignores a policy term. The business is liable.
The explanation. The system makes a decision, but no one can explain why. A customer complains, a regulator asks, a court demands an explanation. If the answer is the system decided, that is not an explanation.
The oversight. The system makes decisions continuously, and no one is watching. Errors accumulate. By the time someone notices, the damage is done.
How to stay compliant
The approach is not different from managing any other compliance obligation. Understand what the law requires, understand what the system does, and make sure the two align.
Name the decisions, the data, and the rules. If the board cannot answer these questions, compliance is not understood. Document everything. Regulators want to see what the system does, how it was tested, who approved it, and how it is monitored.
Monitor continuously. AI systems change. The data changes, the business changes, the regulations change. A system that was compliant last year may not be compliant this year.
"JFSC issued AI governance guidance July 2026; GFSC and EU AI Act moving the same way."
Source: JFSCThe direction is clear. Regulators expect boards to govern AI decisions with the same rigour as any other business decision.
What Fuzzelogic does
Fuzzelogic works with regulated financial institutions, including nine across banking, insurance, and healthcare. We do not sell compliance tools. We help boards understand what AI is doing in their business, what compliance obligations it creates, and how to meet them.
Our AI-ready framework gives boards a plain English way to assess any AI use against five tests. If it fails one, you know before it becomes a compliance issue. If it passes all five, you know you can govern it.
You already have AI in your business. You just do not know where. We find it, classify it, and tell you what to do about it.
Start with the assessment. Two to four weeks, fixed price, and you own the verdict and the roadmap whether or not we build any of it. When you are ready to talk AI, call Fuzzelogic Solutions and ask for Zak. www.FuzzelogicSolutions.com | info@FuzzelogicSolutions.com | +44 (0)1624 618950
Start with the assessment
Two to four weeks, fixed price, and you own the verdict and the roadmap whether or not we build any of it.
When you are ready to talk AI, call Fuzzelogic Solutions and ask for Zak.
www.FuzzelogicSolutions.com | info@FuzzelogicSolutions.com | +44 (0)1624 618950