{"txn_id":"CO-LIFE-0088","assessment_id":"ra_c7dc9e9c01c74582","occurred_at":"2026-09-14T15:00:00+00:00","state":"CO","line_of_business":"life","stage":"underwriting","program_area":"Underwriting/Eligibility","ai_system":{"system_id":"rx-score","model_version":"3","vendor":"third_party","vendor_name":"RxData Labs (fictional)","high_risk_class":"underwriting"},"inputs":{"feature_classes":["rx_history","credit","consumer_report","application_data"],"protected_factors_used":[],"ecdis_present":true,"consumer_report_used":true,"credit_used":true,"data_source_refs":["vendor://rxdata/score","cra://demo-bureau/attributes"],"consumer_token":"tok_showcase_0088"},"output":{"decision":"decline","score":0.91,"reason_codes":["RX4","CR2"],"premium_delta_pct":null},"human_involvement":{"reviewed":false,"reviewer_role":null,"overridden":false},"adverse_action":{"is_adverse":true,"notice_sent_at":null,"reasons_provided":false,"specific_reasons":false,"ecdis_disclosed":false,"appeal_channel":"underwriting-review@summitrange.example"},"carrier_note":"Term life application declined on vendor mortality score built from prescription history and credit attributes.","assessment":{"disposition":"HOLD","summary":"HOLD: 7 finding(s) under rules 2026.10+dbe5ddf6, corpus 2026-10-30-5f07c521. Held for the carrier's compliance review before the outcome is communicated; the carrier decides.","narrative":"On 2026-09-14, rx-score v3 (a third-party system from RxData Labs (fictional)) produced 'decline' in a CO life underwriting transaction. Inputs included rx history, credit, consumer report, application data. External consumer data and information sources were present. A consumer report was used. No human reviewed the output before it took effect. The outcome was adverse to the consumer; no notice to the consumer is recorded. RegBench applied 10 rule(s) in force on 2026-09-14 and recorded 7 finding(s); the most serious is 'Adverse action based on a consumer report with no FCRA notice recorded' (critical, L0).","findings":[{"rule_id":"us.fcra.adverse-action-notice","layer":"L0","judgment_basis":"black_letter","advisory":false,"severity":"critical","title":"Adverse action based on a consumer report with no FCRA notice recorded","required_action":"Hold the outcome for compliance review; generate the notice with every required element before the decision is communicated, and record notice_sent_at on the transaction.","exhibits":["C"],"citations":[{"provision_id":"us-fcra-1681m-a","label":"15 U.S.C. § 1681m(a) (FCRA § 615(a)) — duties of users taking adverse actions on the basis of a consumer report","source_url":"https://www.law.cornell.edu/uscode/text/15/1681m","verified":true},{"provision_id":"us-fcra-1681a-k-1-b-i","label":"15 U.S.C. § 1681a(k)(1)(B)(i) — 'adverse action' in connection with insurance","source_url":"https://www.law.cornell.edu/uscode/text/15/1681a","verified":true}]},{"rule_id":"co.sb169.ecdis-adverse-untested","layer":"L2","judgment_basis":"black_letter","advisory":false,"severity":"high","title":"Adverse outcome from an ECDIS-driven model with no unfair-discrimination testing on record","required_action":"Attach the system's unfair-discrimination testing report reference; route the outcome to compliance review.","exhibits":["C"],"citations":[{"provision_id":"co-crs-10-3-1104-9","label":"C.R.S. § 10-3-1104.9 (S.B. 21-169) — unfair discrimination through external consumer data, algorithms and predictive models","source_url":"https://codes.findlaw.com/co/title-10-insurance/co-rev-st-sect-10-3-1104-9/","verified":true}]},{"rule_id":"co.reg-10-1-1.governance-framework-amended","layer":"L3","judgment_basis":"black_letter","advisory":false,"severity":"medium","title":"ECDIS used outside an attested governance and risk management framework (amended Regulation 10-1-1)","required_action":"Add the system to the Regulation 10-1-1 inventory, attest framework coverage, and include it in the next annual report filed through SERFF.","exhibits":["A","B"],"citations":[{"provision_id":"co-reg-10-1-1-s5","label":"3 CCR 702-10, Regulation 10-1-1 (amended, effective 15 Oct 2025), § 5.A — governance and risk management framework (life, private passenger auto, health benefit plans)","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true},{"provision_id":"co-reg-10-1-1-s6","label":"3 CCR 702-10, Regulation 10-1-1 (amended), § 6 — reporting requirements and officer attestation","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true}]},{"rule_id":"co.reg-10-1-1.vendor-ecdis-documentation","layer":"L3","judgment_basis":"black_letter","advisory":false,"severity":"medium","title":"Third-party ECDIS model without documentation of purpose, inputs and vendor oversight","required_action":"Record the vendor model's documentation reference in the inventory and the vendor oversight record.","exhibits":["A","D"],"citations":[{"provision_id":"co-reg-10-1-1-s5","label":"3 CCR 702-10, Regulation 10-1-1 (amended, effective 15 Oct 2025), § 5.A — governance and risk management framework (life, private passenger auto, health benefit plans)","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true},{"provision_id":"co-reg-10-1-1-s5-b-vendors","label":"3 CCR 702-10, Regulation 10-1-1 (amended), § 5.B — responsibility for vendors and external resources","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true}]},{"rule_id":"precedent.ai-flagged-cancellation-without-notice","layer":"L5","judgment_basis":"precedent","advisory":true,"severity":"medium","title":"AI-flagged non-renewal or decline with no notice recorded (pattern of the 2026 Pennsylvania agreement)","required_action":"Confirm the notice and document deadlines before the cancellation or decline takes effect; record the notice on the transaction.","exhibits":["C"],"citations":[{"provision_id":"precedent-pa-geico-2026","label":"Pennsylvania Attorney General agreement with GEICO (announced May 2026) — AI-enabled underwriting review and cancellation without adequate notice","source_url":"https://www.attorneygeneral.gov/?p=33518","verified":true}]},{"rule_id":"doctrine.unreviewed-adverse-high-risk","layer":"L6","judgment_basis":"doctrine","advisory":true,"severity":"medium","title":"Adverse outcome from a high-risk AI system with no human review","required_action":"Route to the carrier's reviewer; record the review and any override on the transaction.","exhibits":["B","C"],"citations":[{"provision_id":"naic-ai-bulletin-s3-1-ais-program","label":"NAIC Model Bulletin on the Use of AI Systems by Insurers (adopted 4 Dec 2023), Section 3, 1.0 General Guidelines — the written AIS Program","source_url":"https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf","verified":true}]},{"rule_id":"co.reg-10-1-1.monitoring-undocumented","layer":"L3","judgment_basis":"black_letter","advisory":false,"severity":"low","title":"ECDIS model with no documented testing or performance monitoring reference","required_action":"Record the testing and monitoring documentation reference for the model.","exhibits":["C"],"citations":[{"provision_id":"co-reg-10-1-1-s5","label":"3 CCR 702-10, Regulation 10-1-1 (amended, effective 15 Oct 2025), § 5.A — governance and risk management framework (life, private passenger auto, health benefit plans)","source_url":"https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12182","verified":true}]}],"point_in_time":{"as_of":"2026-09-14","rules_version":"2026.10+dbe5ddf6","corpus_snapshot":"2026-10-30-5f07c521","engine_version":"regbench-engine/0.4.0","model_version":"deterministic-1"},"evaluated_at":"2026-10-30T11:23:25.357213+00:00","fingerprint":"57e72cf53d656f6b0474ba54"},"review":{"status":"resolved","outcome":"remediated","hours_to_resolve":7.4,"reviewer_role":"underwriter","resolved_at":"2026-09-14T22:23:26.932413+00:00"},"ledger":{"seq":1123,"hash":"2772bcd57c6e348c99369492daacdf86951d1a732d210b3c383220c742192483","prev_hash":"4b7388bfc6650316348ff6958f00f5b96ff5ee257a12b6fe7d98e61f88ac4096","recorded_at":"2026-09-14T15:01:25+00:00"}}