Regulatory Assessment

BB-UW-0078 HOLD

TX · home · underwriting · decided 2026-07-14 19:28 UTC · Bluebonnet Mutual Insurance Company (fictional)

On 2026-07-14, uw-triage v2.4 (an internally developed system) produced 'decline' in a TX home underwriting transaction. Inputs included application data, claims history, consumer report, credit, geography. A consumer report was used. A human reviewed the output by a underwriter. The outcome was adverse to the consumer; no notice to the consumer is recorded. RegBench applied 11 rule(s) in force on 2026-07-14 and recorded 4 finding(s); the most serious is 'Adverse action based on a consumer report with no FCRA notice recorded' (high, L0).

HOLD: 4 finding(s) under rules 2026.10+dbe5ddf6, corpus 2026-10-30-5f07c521. Held for the carrier's compliance review before the outcome is communicated; the carrier decides.

Findings (4)

high L0 black letter hold exhibit C us.fcra.adverse-action-notice

Adverse action based on a consumer report with no FCRA notice recorded

Finding. The decision was adverse to the consumer and was based in whole or in part on a consumer report, but no adverse action notice is recorded on the transaction.

Basis. FCRA § 615(a) requires the user of a consumer report to notify the consumer of an adverse action, identify the consumer reporting agency, state that the agency did not make the decision, and explain the consumer's rights to a free report and to dispute. A denial, increase in charge or unfavorable change in insurance terms in connection with underwriting is an adverse action under § 603(k)(1)(B)(i).

Required action. Hold the outcome for compliance review; generate the notice with every required element before the decision is communicated, and record notice_sent_at on the transaction.

Excerpt: us-fcra-1681m-a · federal statute (public domain) · in force from 1971-04-25

"If any person takes any adverse action with respect to any consumer that is based in whole or in part on any information contained in a consumer report, the person shall (1) provide oral, written, or electronic notice of the adverse action to the consumer; (2) provide to the consumer written or electronic disclosure of a numerical credit score [used in taking the adverse action, with the information required by § 1681g(f)(1)]; (3) provide to the consumer orally, in writing, or electronically (A) the name, address, and telephone number of the consumer reporting agency ... that furnished the report ... and (B) a statement that the consumer reporting agency did not make the decision to take the adverse action and is unable to provide the consumer the specific reasons why the adverse action was taken; and (4) provide ... notice of the consumer's right (A) to obtain ... a free copy of a consumer report ... within 60 days ... and (B) to dispute ... the accuracy or completeness of any information in a consumer report."

Excerpt: us-fcra-1681a-k-1-b-i · federal statute (public domain) · in force from 1997-09-30

"a denial or cancellation of, an increase in any charge for, or a reduction or other adverse or unfavorable change in the terms of coverage or amount of, any insurance, existing or applied for, in connection with the underwriting of insurance."

high L2 black letter hold exhibit C tx.559.credit-adverse-effect-notice

Credit-based adverse effect without the § 559.054 notice of reasons

Finding. Credit information contributed to an adverse effect on a personal-lines applicant or insured, and the transaction does not record a notice stating the reasons with the primary credit factors.

Basis. § 559.054 requires, within 30 days, notice of the action and the reasons, the consumer reporting agency's details, and the consumer's rights; the notice must describe "not more than four factors that were the primary influences", and generalized terms such as "poor credit history" are not sufficient. "Adverse effect" is defined in § 559.001(1).

Required action. Hold until a notice stating the primary credit factors is generated and recorded within the 30-day window. 30 days

Excerpt: tx-ins-559-054 · state statute (government edict) · in force from 2005-09-01

"(a) If, based in whole or in part on information contained in a credit report, an insurer takes an action resulting in an adverse effect with respect to an applicant for insurance coverage or insured, the insurer shall provide to the applicant or insured within 30 days: (1) written or electronic notice of the action resulting in an adverse effect and the reasons for that action; (2) the name, address, and telephone number of the consumer reporting agency ...; (3) ... notice that the consumer reporting agency did not make the decision ...; (4) ... notice of the applicant's or insured's right to: (A) obtain a free copy of the consumer's credit report ... during the 60-day period after the date of the notice; and (B) dispute ... the accuracy or completeness of any information ... (b) In the notice described by Subsection (a)(1), an insurer shall include a description of not more than four factors that were the primary influences of the action resulting in the adverse effect. (c) The use by an insurer of a generalized term such as 'poor credit history,' 'poor credit rating,' or 'poor credit score' does not constitute sufficient notice under this section ..."

Excerpt: tx-ins-559-001 · state statute (government edict) · in force from 2005-09-01

"'Adverse effect' means an action taken by an insurer in connection with the underwriting of insurance for a consumer that results in the denial of coverage, the cancellation or nonrenewal of coverage, or the offer to and acceptance by a consumer of a policy form, premium rate, or deductible other than the policy form, premium rate, or deductible for which the consumer specifically applied."

medium L5 precedent advisory flag exhibit C precedent.ai-flagged-cancellation-without-notice

AI-flagged non-renewal or decline with no notice recorded (pattern of the 2026 Pennsylvania agreement)

Finding. An AI system flagged the risk and the policy was declined or not renewed without a notice to the consumer being recorded; this is the fact pattern of the Pennsylvania Attorney General's 2026 agreement with an auto insurer over an AI-enabled underwriting review tool.

Basis. Precedent: as reported, the insurer agreed to follow the Pennsylvania Insurance Department's AI guidance, to extend document deadlines and to accept additional proof after a cancellation without adequate notice. Regulators in other states read the same headlines; the pattern deserves a reviewer's attention wherever it appears.

Required action. Confirm the notice and document deadlines before the cancellation or decline takes effect; record the notice on the transaction.

Excerpt: precedent-pa-geico-2026 · enforcement precedent reported by secondary sources; persuasive only · in force from 2026-05-22

Announced by Pennsylvania Attorney General Dave Sunday on 22 May 2026: a new policyholder in West Philadelphia was selected by an underwriting-review tool with artificial-intelligence features during the insurer's 60-day review of new policyholders and lost coverage without realising it after believing she had sent the requested residency documents. GEICO agreed to act in line with the Pennsylvania Insurance Department's guidance on insurers' use of AI, to extend the document-submission period for selected new policyholders by one week, to accept one form of residency verification (a current driver's licence suffices when its address matches the policy), and to train customer-service staff on the revised requirements. No admission of wrongdoing; no monetary term reported.

medium L6 doctrine advisory flag exhibit C doctrine.zip-credit-interaction-proxy

Geography and credit used together in an adverse decision (proxy pattern to test at portfolio level)

Finding. The decision used both geographic and credit inputs and was adverse to the consumer; the interaction of these inputs is a recognised proxy pattern for protected characteristics.

Basis. Doctrine: the bulletin's concern with unfair discrimination extends to proxies, and the Supplement's Exhibit C item 10a asks whether inputs, derived variables and outputs are evaluated "for potential proxy relationships"; a geography-by-credit interaction should be covered by portfolio-level outcome testing and the result referenced from the case file.

Required action. Confirm the system's portfolio outcome testing covers the geography-credit interaction; link the result.

Excerpt: naic-ai-bulletin-s3-1-ais-program · NAIC model guidance; binding in a state only as adopted (see adoptions register) · in force from 2023-12-04

"all Insurers authorized to do business in this state are expected to develop, implement, and maintain a written program (an 'AIS Program') for the responsible use of AI Systems that make, or support decisions related to regulated insurance practices. The AIS Program should be designed to mitigate the risk of Adverse Consumer Outcomes ... The Department also encourages the development and use of verification and testing methods to identify errors and bias in Predictive Models and AI Systems, as well as the potential for unfair discrimination in the decisions and outcomes resulting from the use of Predictive Models and AI Systems."

Point in time

Law as of
2026-07-14
Rules version
2026.10+dbe5ddf6
Corpus snapshot
2026-10-30-5f07c521
Engine
regbench-engine/0.4.0 · deterministic-1
Fingerprint
8da775081ca1693a1812fb1f
Evaluated
2026-10-30 11:23:22 UTC
Exhibit C case file
yes

Ledger

Entry
#78 · assessment · recorded 2026-07-14T19:28:37+00:00
Hash
ebc3d5fb4ced408c0b88c4d0a9ee2f1ae5d374f56eda56113c7c72b11b8ad4ad
Previous
0f5090f4f191b7cef2a61574f4002d057e71a5ab106cce40c57a48c71846e945
Stored copy intact
yes, hashes match

Verify the whole chain Case file JSON

Carrier review

Resolved by underwriter · outcome confirmed-no-change · 5.0 hours after it opened · Resolved in the carrier's review queue (synthetic).

Recorded facts

AI system
uw-triage v2.4 · internal · high-risk class: underwriting
Governance attested
True
Testing report
test://bluebonnet/uw-triage/2026Q3
Model documentation
doc://bluebonnet/uw-triage/2.4
Feature classes
application_data, claims_history, consumer_report, credit, geography
Protected factors used
none
External data (ECDIS)
False
Consumer report / credit
True / True
Data sources
cra://demo-bureau/report
Decision
decline · score 0.794 · codes R12, R31
Human review
yes (underwriter)
Adverse to consumer
True
Notice
not recorded · reasons: False · specific: False · external data disclosed: False
Appeal channel
–
Consumer token
tok_9ac0a904a0