August and the beginning of September sustained the high volume and operational complexity that have characterized insurance regulation throughout 2026. Artificial intelligence oversight moved closer to examination readiness, catastrophe-related orders required repeated updates to cancellation, nonrenewal, claims, and policy-administration processes, and states continued expanding requirements governing pharmacy benefit managers, health coverage, electronic claims, and financial reporting.
For carriers, producers, and compliance teams, the activity points to a growing implementation challenge. Regulatory obligations increasingly cross business functions and require coordinated changes to procedures, systems, contracts, communications, training, and recurring compliance tasks. Meanwhile, a significant cluster of state and federal requirements scheduled for 2027 is beginning to take shape. The sections below break down the most important developments and their operational implications.
NAIC AI Supplement Signals Future Examination Questions
The NAIC continued piloting and refining its draft Artificial Intelligence Risk Evaluation Supplement, which is designed to help regulators assess insurer governance, risk management, model oversight, data controls, and third-party management practices associated with AI systems. The supplement does not create new regulatory requirements, but it provides an important indication of the information regulators may request during future market-conduct and financial examinations.
Insurers should anticipate questions about their AI inventories, governance documentation, model oversight, data controls, human review, testing, vendor management, issue remediation, and evidence supporting the effectiveness of their control environments.
What this means for insurers
AI examination readiness requires more than a general policy. Insurers should consider whether they can produce a complete inventory of AI systems and use cases, identify accountable owners, document risk assessments, demonstrate appropriate human oversight, and provide records of model and control testing. Third-party oversight is likely to receive particular attention — vendor assessments should address how third parties develop, use, monitor, and govern AI, especially when vendor systems influence underwriting, pricing, claims, or fraud detection.
Draft examination supplement. The supplement does not establish new requirements.
EU AI Act Reinforces Broader Governance Expectations
Requirements under the European Union AI Act for certain high-risk AI systems took effect on August 2, 2026, reinforcing expectations involving risk management, governance, transparency, human oversight, and documentation for AI systems used in financial decision-making. U.S. insurers may not be directly affected in every instance, but the development contributes to a broader regulatory movement toward documented, enterprise-level AI governance.
Organizations operating across jurisdictions should evaluate how international and domestic expectations intersect with existing model-risk, consumer-protection, privacy, cybersecurity, and third-party management programs.
Oregon Wildfire Orders Demonstrate the Need for Version Control
Oregon issued a series of wildfire bulletins and orders affecting claims handling and cancellation and nonrenewal procedures. The original July 31 emergency order was followed by revised ZIP-code lists and an August 30 extension. Because each revision references earlier requirements, insurers must be able to identify the currently applicable geography, relief period, and operational obligations.
What this means for insurers
Policy administration, billing, claims, and compliance teams need a coordinated process for updating geographic applicability, expiration dates, procedures, and system controls, and should retain evidence showing when each revision was reviewed and implemented. Without effective version control, firms may apply an expired requirement, overlook a newly covered ZIP code, or fail to demonstrate when operational rules were updated.
Additional States Issue Catastrophe-Related Requirements
Catastrophe activity extended across multiple jurisdictions during August:
- Washington issued wildfire emergency orders addressing cancellation and nonrenewal restrictions, premium grace periods, and early prescription refills.
- California established a one-year cancellation and nonrenewal moratorium for specified ZIP codes affected by the Gann Fire.
- Colorado issued emergency rules governing homeowners cancellation and nonrenewal activity related to the Aspen Acres Fire.
- Indiana established a 60-day cancellation and nonrenewal moratorium following the August 11 weather-related disaster events involving severe weather, derecho, tornadic activity, and flooding.
- Nevada issued guidance requesting flexibility for customers affected by multiple wildfires.
- Hawaii issued claims-handling guidance and temporarily authorized nonresident adjusters following Hurricane Lala.
These actions demonstrate that catastrophe compliance reaches beyond property claims — emergency requirements may affect billing, cancellation and nonrenewal, prescription refills, claims procedures, temporary adjuster licensing, customer communications, and evidence retention. Insurers need a reliable way to connect each event to its jurisdiction, applicable geography, effective and expiration dates, operational requirements, communications, affected systems, and superseded orders.
Missouri Health Reforms Require Cross-Functional Implementation
Missouri enacted several health insurance changes with immediate or near-term implementation consequences. H.B. 2372 and related Department Bulletin 26-10 address anesthesia reimbursement, prescription drug prior authorization, protections involving entities participating in the federal 340B Drug Pricing Program, coverage of nonopioid alternatives, maternity-related blood pressure monitors, and cost-sharing for certain breast examinations. H.B. 2596 changes requirements for multiple-employer self-insured health plans and amends coverage rules for self-administered hormonal contraceptives.
What this means for insurers
Claims adjudication rules, provider reimbursement logic, prior-authorization workflows, notices, contracts, benefit configurations, and evidence-of-coverage documents may require review. The developments also illustrate the cross-functional nature of implementation — compliance teams may need to coordinate with claims, product, legal, provider contracting, pharmacy, customer service, and technology teams to confirm each applicable requirement has been addressed.
PBM Requirements Expand Beyond Licensing
Pharmacy benefit manager regulation continues to expand beyond licensing into contracting, claims, reporting, examinations, rebates, spread pricing, audits, and penalties. Rhode Island established a provisional certificate-of-authority requirement for PBMs intending to operate beginning January 1, 2027, with applications due October 1, 2026. New Hampshire enacted broad PBM requirements governing licensing, contracting, reporting, market conduct, retroactive denials, rebates, spread pricing, pharmacy audits, and penalties, generally effective January 1, 2027. Florida also amended requirements governing changes to PBM registration information.
What this means for insurers
Carriers may remain accountable for certain obligations even when PBM functions are delegated. Compliance teams should identify which requirements apply directly to the PBM, which apply to the carrier, and which require contractual oversight — and whether vendor-management and contracting programs address audit rights, reporting responsibilities, rebate administration, spread-pricing controls, registration changes, regulatory notifications, and responsibility for remediating deficiencies.
Claims Administration Becomes More Electronic and Prescriptive
Several August developments demonstrate the continued movement toward electronic, standardized, and more tightly controlled claims administration:
- Colorado continued transitioning workers’ compensation claim information to EDI 3.1, including XML schema changes.
- Virginia added a document-validation step to WebFile.
- Nebraska launched a web-based Diagnostic Related Group reporting tool.
- New York issued guidance on RFA-2 electronic submissions and updated workers’ compensation records forms.
- North Carolina will require certain motor vehicle claim payments to be mailed or delivered within 10 business days after settlement.
- Washington revised Balance Billing Protection Act arbitration forms, mandatory beginning September 10, 2026.
What this means for insurers
Electronic filing is not simply a change in submission method. Insurers may need documented controls addressing data sourcing, validation, approval, submission, rejection management, reconciliation, correction, and record retention — and should evaluate whether written procedures accurately reflect current electronic processes and whether responsibility for resolving exceptions is clearly assigned.
Financial Reporting and Filing Changes Add Recurring Obligations
States continued to update financial reporting, holding-company, tax, assessment, and filing requirements. Tennessee amended holding-company reporting requirements involving group capital calculations, Form D prior notices, and form-filing processes, effective September 27, 2026. Florida adopted revised NAIC instructions and manuals for annual and quarterly reporting. New York issued year-end guidance covering actuarial opinions, memoranda, risk-based capital analyses, and the Regulatory Asset Adequacy Issues Summary. California established deadlines for corporate applications seeking year-end approval, while other states issued tax or filing-process changes.
These developments reinforce the value of centralized calendars that connect recurring obligations with filing owners, affected entities, required approvals, source data, policies, and evidence of completion.
Property, Casualty, and Workers’ Compensation Requirements Continue to Evolve
Missouri enacted changes affecting an insurer’s legal title or subrogation rights after paying all or part of a property damage or automobile claim; the relevant requirements under S.B. 835 and H.B. 2636 became effective August 28, 2026. Massachusetts enacted a law concerning insurer attempts to prohibit an insured from hiring, retaining, or consulting with a public adjuster. Illinois increased burial expense benefits, while California enacted new penalties related to payments to the Workers’ Compensation Administration Revolving Fund.
Although individual workers’ compensation changes may be narrow, their cumulative operational burden can be significant. Insurers must monitor fee schedules, reimbursement limits, forms, electronic data interchange, assessments, experience ratings, provider requirements, and related effective dates across jurisdictions.
Life and Annuity Requirements Shift at the State Level
Oklahoma revoked certain mandatory producer training requirements for long-term care insurance. Illinois enacted a requirement involving group or individual long-term care disability income insurance policies or contracts that limit the duration of coverage for mental health and substance use disorders — the required disclosure must be provided at the time of application. New Hampshire also amended premium tax credits involving New Hampshire Life and Health Insurance Guaranty Association assessments.
Separately, all states have a best interest standard and related training requirement in place for annuity recommendations except the District of Columbia, where adoption remained pending as described in the August update.
CMS Activity Builds the Contract Year 2027 Readiness Calendar
Federal insurance activity during August was dominated by CMS developments involving Medicare Advantage, Medicare Part D, ACA marketplace administration, claims operations, payment requirements, and data submissions. CMS activity addressed Contract Year 2027 enrollment and disenrollment guidance, provider-directory submissions and attestations, HPMS updates, appeals and grievance reporting, Star Ratings, contract execution, Part D formulary submissions, Prescription Drug Event data, reconciliation attestations, and marketplace certification.
What this means for insurers
Medicare Advantage and Part D organizations face a concentrated operational calendar involving submissions, attestations, corrections, member materials, provider-directory information, appeals, grievances, and reporting. Compliance teams should coordinate with product, claims, pharmacy, provider-network, legal, operations, and technology functions to identify affected processes and assign implementation responsibility. Increased reliance on structured data, validation, reconciliation, and formal attestations also heightens the importance of data governance and evidence retention.
Federal Independent Dispute Resolution Processes Continue to Change
Federal agencies continued refining Independent Dispute Resolution processes under the No Surprises Act. Developments included operational corrections, the forthcoming IDR Gateway, and changes to the batching of disputes. Health plans may need to update dispute-management systems, platform access, workflow controls, batching functionality, procedures, and employee training. Claims teams should also confirm that written processes reflect current federal instructions and clearly assign responsibility for managing disputes and supporting documentation.
ACA Marketplace Requirements Remain in Motion
CMS released guidance affecting Qualified Health Plan certification, Standardized Plan Options for 2027, Federally Facilitated Exchange timelines, risk-adjustment tools, premium tax credit reconciliation, and related marketplace processes. Certain provisions of the Notice of Benefit and Payment Parameters for 2027 have not taken effect as finalized because of ongoing litigation identified in the regulatory update, and Qualified Health Plan certification requirements and timelines have also been revised.
Open enrollment for the Federally Facilitated Exchange is scheduled to begin November 1, 2026. Marketplace issuers should review applicable certification, filing, product-governance, eligibility, subsidy, and risk-adjustment processes.
January 1, 2027 Creates a Significant Implementation Cluster
State health and PBM reforms, Medicare Advantage and Part D operational activity, marketplace requirements, reporting obligations, provider-directory controls, appeals and grievance processes, and member-material changes are creating a substantial 2027 implementation pipeline. Many of these requirements require coordinated changes across policies, procedures, contracts, forms, systems, notices, training, and compliance tasks, and firms should also account for dependencies among business functions and third-party administrators, PBMs, providers, and other vendors.
What this means for insurers
A consolidated implementation calendar can help insurers identify overlapping effective dates, assign responsibility, monitor dependencies, and maintain evidence that each requirement was reviewed and implemented.
How RegEd Can Help
Operationalize change across states and business functions
The volume of August activity underscores the challenge of managing requirements that vary by jurisdiction, product, effective date, and responsible business function. Catastrophe orders may change repeatedly, PBM requirements divide responsibility among carriers and vendors, and 2027 health and Medicare developments require coordinated updates across contracts, claims, reporting, member materials, and training.
RegEd’s regulatory change management and compliance management solutions help insurers connect regulatory developments to affected products, policies, procedures, controls, owners, and recurring tasks. A centralized, workflow-enabled approach can improve implementation visibility while maintaining the documentation needed to demonstrate that regulatory changes were reviewed and addressed.