HL-CLM-1018 FLAG
On 2026-10-18, claims-adjud v5.1 (an internally developed system) produced 'deny' in a NY health claims transaction. Inputs included medical records, claims history. No human reviewed the output before it took effect. The outcome was adverse to the consumer; no notice to the consumer is recorded. RegBench applied 1 rule(s) in force on 2026-10-18 and recorded 1 finding(s); the most serious is 'Adverse outcome from a high-risk AI system with no human review' (medium, L6).
FLAG: 1 finding(s) under rules 2026.10+dbe5ddf6, corpus 2026-10-30-5f07c521. Routed to the carrier's compliance reviewer with cited findings.
Findings (1)
Adverse outcome from a high-risk AI system with no human review
Finding. A high-risk system produced an adverse outcome that took effect without human review.
Basis. Doctrine: examiners applying the NAIC bulletin's governance and control expectations, and the AI Risk Evaluation Supplement's Exhibit B question on whether there is a human in the loop for direct-consumer-impact uses, ask first about human oversight of adverse automated outcomes; an unreviewed adverse decision is the case file most likely to be sampled.
Required action. Route to the carrier's reviewer; record the review and any override on the transaction.
Excerpt: naic-ai-bulletin-s3-1-ais-program · NAIC model guidance; binding in a state only as adopted (see adoptions register) · in force from 2023-12-04
"all Insurers authorized to do business in this state are expected to develop, implement, and maintain a written program (an 'AIS Program') for the responsible use of AI Systems that make, or support decisions related to regulated insurance practices. The AIS Program should be designed to mitigate the risk of Adverse Consumer Outcomes ... The Department also encourages the development and use of verification and testing methods to identify errors and bias in Predictive Models and AI Systems, as well as the potential for unfair discrimination in the decisions and outcomes resulting from the use of Predictive Models and AI Systems."
Point in time
- Law as of
- 2026-10-18
- Rules version
- 2026.10+dbe5ddf6
- Corpus snapshot
- 2026-10-30-5f07c521
- Engine
- regbench-engine/0.4.0 · deterministic-1
- Fingerprint
- 56629b3ae85b83cc7dd554da
- Evaluated
- 2026-10-30 11:23:25 UTC
- Exhibit C case file
- yes
Ledger
- Entry
- #1018 · assessment · recorded 2026-10-18T03:20:09+00:00
- Hash
- c1cb4e2a890a22cf450a9b8ffc5e405a15d8047febd6d914c332b849402f7f7e
- Previous
- f016510a35f7bad596a4c6f9e7ef0cc43171a591fdd8c71aec62ac65d686e396
- Stored copy intact
- yes, hashes match
Carrier review
Resolved by adjuster · outcome confirmed-no-change · 39.4 hours after it opened · Resolved in the carrier's review queue (synthetic).
Recorded facts
- AI system
- claims-adjud v5.1 · internal · high-risk class: claims
- Governance attested
- True
- Testing report
- test://harborline/claims-adjud/2026Q1
- Model documentation
- doc://harborline/claims-adjud/5.1
- Feature classes
- medical_records, claims_history
- Protected factors used
- none
- External data (ECDIS)
- False
- Consumer report / credit
- False / False
- Data sources
- none recorded
- Decision
- deny · score 0.723 · codes E-114
- Human review
- none
- Adverse to consumer
- True
- Notice
- not recorded · reasons: True · specific: False · external data disclosed: False
- Appeal channel
- –
- Consumer token
- tok_b2531ec043