Scopeframe research deskSection 12Page 12 of 12Updated 20 October 2026
Regulatory and evaluation sources
California Code of Regulations, §2695.3, File and Record Documentation — https://govt.westlaw.com/calregs/Document/IE6244E065C2F11EC9C68000D3A7C4BC3?contextData=%28sc.Default%29
NAIC, Model Bulletin: Use of Artificial Intelligence Systems by Insurers, adopted 4 December 2023 — https://content.naic.org/sites/default/files/inline-files/2023-12-4%20Model%20Bulletin_Adopted_0.pdf
NAIC, AI Model Bulletin state adoption reference — https://content.naic.org/sites/default/files/cmte-h-big-data-artificial-intelligence-wg-map-ai-model-bulletin.pdf
New York DFS, 23 NYCRR Part 500 — https://www.dfs.ny.gov/industry_guidance/cybersecurity/23_nycrr_part_500
New York DFS, Guidance on Managing Risks Related to Third-Party Service Providers, 21 October 2025 — https://www.dfs.ny.gov/industry-guidance/industry-letters/il20251021-guidance-managing-risks-third-party