AI Compliance & Regulation Resources

Featured Topics

AI Insurance Exclusions

How carriers are modifying coverage for AI-related claims

AI in Hiring & Recruiting

State-by-state hiring regulations and compliance requirements

AI Governance Framework

Build an internal AI governance program that satisfies regulators and insurers

Browse by State

Browse by Industry

Schools, universities, EdTech platforms, and learning management providers that deploy AI for admissions screening, student assessment, academic proctoring, and personalized learning. These firms face regulatory scrutiny because AI in education affects access to educational opportunities — education is explicitly listed as a consequential decision domain in multiple state AI laws alongside employment, healthcare, and housing.

4 AI use cases tracked E&O, Cyber, D&O, CGL

Financial Services & Fintech

Banks, credit unions, investment firms, fintech companies, and financial advisors that deploy AI for credit decisioning, underwriting, portfolio management, fraud detection, and customer engagement. These firms face overlapping state AI obligations and federal financial regulations (ECOA, FCRA, Dodd-Frank), creating a layered compliance environment where state AI laws add requirements on top of — not in place of — existing federal frameworks.

4 AI use cases tracked D&O, E&O, Cyber, Fiduciary

Healthcare Providers & Health Tech

Hospitals, physician practices, telemedicine platforms, and health technology companies that deploy AI for clinical decision support, patient triage, diagnostic assistance, and patient communication. These firms operate under heightened regulatory scrutiny because AI errors can directly affect patient safety and health outcomes, and because healthcare is explicitly listed as a high-risk decision domain in multiple state AI laws.

4 AI use cases tracked Medical Malpractice, E&O, Cyber, D&O

HR & Recruiting Firms

Staffing agencies, recruiting firms, and HR technology providers that use AI for candidate sourcing, resume screening, interview analysis, and employment decision support. These firms face heightened regulatory scrutiny because AI in hiring directly affects individuals' economic opportunities.

4 AI use cases tracked EPL, E&O, Cyber, D&O

Insurance Brokers

Insurance brokers and agents who use AI tools for underwriting support, client risk assessment, claims processing, and policy recommendation.

4 AI use cases tracked E&O, CGL, Cyber, D&O

Law Firms

Law firms and legal professionals using AI for legal research, document review, contract analysis, and client advisory services.

4 AI use cases tracked E&O, Cyber, D&O

Marketing Agencies

Marketing and creative agencies that use AI tools for content creation, design, client communication, and campaign management.

4 AI use cases tracked E&O, CGL, Cyber

Real Estate & Property Management

Real estate brokerages, property management firms, proptech platforms, and real estate investment companies that deploy AI for property valuation, tenant screening, listing optimization, and client engagement. These firms face regulatory scrutiny because AI in housing directly intersects with fair housing obligations, and algorithmic bias in property valuations or tenant screening can produce discriminatory outcomes at scale.

4 AI use cases tracked E&O, CGL, Cyber, D&O

View all industries →

Common Questions

Do AI-driven adverse actions require fair lending notices? Yes. Federal fair lending laws require adverse action notices regardless of whether the decision was made by AI. Under ECOA and Regulation B, lenders must provide written adverse action notices with specific reasons for credit denials — regulators have clarified this applies even when an AI model is the proximate decision-maker. FCRA similarly requires adverse action notices when a consumer report influences a credit or employment decision. Colorado SB 24-205 adds a state-level layer requiring AI-specific consumer notification and appeal rights for consequential financial decisions, creating overlapping obligations for Colorado lenders.
Who is liable when an AI agent causes harm? Liability for AI agent actions typically flows to the deploying organization under existing agency law principles, but may extend to developers and vendors depending on the jurisdiction and whether the harm resulted from the AI's autonomous decision-making.
Do AI agents create additional insurance risk? Yes. Autonomous AI agents that take actions without human approval create compounded liability exposure because they can trigger both regulatory violations and insurance exclusions independently, with attribution of responsibility still legally unsettled.
What AI compliance requirements apply to insurance brokers? Insurance brokers using AI for quoting, risk assessment, or client recommendations face Colorado's high-risk AI classification for insurance decisions, plus potential E&O exposure if AI exclusion endorsements affect their own coverage.
What AI compliance requirements apply to law firms? Law firms using AI for document review, legal research, or client communication face state-specific disclosure obligations and risk malpractice claims if AI generates incorrect legal advice. Colorado and Illinois regulations apply when AI touches client matters.
Which states give consumers the right to appeal AI decisions? Colorado SB 24-205 and Connecticut SB-1103 both provide consumers the right to appeal adverse decisions made by high-risk AI systems and request human review.
Which states require AI disclosure to consumers? Colorado, Connecticut, California, and Illinois all require disclosure when AI is used in consequential decisions, with California uniquely requiring watermarking of AI-generated content.
What AI documentation do insurers require? Insurers increasingly want documented AI governance programs, risk assessments, and usage inventories when underwriting technology-related policies. Hamilton's sublimit endorsement explicitly rewards governance documentation with higher coverage limits.