Bulletin No. 2024-11Adopted

AI governance for Oklahoma insurers

The Oklahoma Insurance Department issued Bulletin No. 2024-11 on November 14, 2024, adopting the NAIC Model Bulletin on the Use of AI Systems by Insurers. It reminds insurers that any action affecting consumers must comply with Oklahoma law, including the unfair trade practices and unfair claims settlement statutes, regardless of whether AI supported the decision. The bulletin lets an insurer's AIS Program rely in whole or in part on a recognized framework such as the NIST AI Risk Management Framework, and it preserves the Department's authority to examine AI use under the NAIC Market Regulation Handbook.

Bulletin2024-11
IssuedNovember 14, 2024
EffectiveUpon issuance
BasisNAIC model bulletin

What Oklahoma expects from your AIS Program

Oklahoma adopted the NAIC model verbatim, so the program expectations match the national framework.

Governance

A written program with clear ownership. Senior management is accountable to the board, and a cross-functional body oversees AI across its whole life cycle.

Risk Management & Internal Controls

Controls at every stage of the model life cycle, from data sourcing through retirement, sized to the potential harm to consumers.

Third-Party AI Systems & Data

The insurer stays responsible for AI it did not build. Vendor relationships need diligence, contract rights, and the ability to produce evidence.

Documentation & Audit-Readiness

Section 4 spells out what an examiner can ask for. Treating that list as a standing requirement is what keeps a program defensible.

Legal authority

The Oklahoma Insurance Department grounds the bulletin in laws it already enforces:

  • Unfair methods of competition and deceptive practices36 O.S. §1204
  • Unfair Claims Settlement Practices Act36 O.S. §1250 et seq.
  • Corporate Governance Annual Disclosure Act36 O.S. §1534 et seq.

Who it applies to

The bulletin reaches every entity holding a Oklahoma certificate of authority, including:

  • Property and casualty insurers
  • Life and annuity insurers
  • Health insurers and HMOs
  • All other entities holding an Oklahoma certificate of authority

State-specific changes: Oklahoma tracks the NAIC model and expressly allows the AIS Program to incorporate a third-party framework such as the NIST AI Risk Management Framework v1.0. The core program expectations match the national framework.

Learn the basics

Resources for Oklahoma insurers

Start with these plain-language explainers and field guides.

Guide

What is the NAIC Model Bulletin on AI?

The NAIC Model Bulletin on the Use of AI Systems by Insurers is the template most states use to set AI governance expectations. Here is what it says and why it matters.

Guide

What is an AIS Program?

An AI Systems Program (AIS Program) is the written program the NAIC Model Bulletin expects every insurer to maintain. Here are its four pillars and what each one requires.

Guide

What are the NAIC AI Principles?

The NAIC AI Principles, adopted in 2020, are the foundation beneath every state AI bulletin. The five principles spell FACTS: Fair, Accountable, Compliant, Transparent, and Secure.

Guide

AI in Insurance: Key Regulatory Definitions

The NAIC Model Bulletin defines the terms that carry legal weight, from AI System to Adverse Consumer Outcome to Model Drift. Here is what each one means for insurers.

Article

Insurance Regulators Are Forcing AI Governance. Most Carriers Aren't Ready.

State insurance regulators and bar associations are sounding the alarm on AI in insurance. Legal and regulatory pressure is forcing insurers to operationalize AI governance, not just document it.

Article

The NAIC Bulletin Is the Floor Your Reinsurer Will Hold You To

Twenty-four jurisdictions have adopted the NAIC Model Bulletin on AI. Most carrier compliance teams are working to the regulatory text. Their reinsurers will use the same document as an evidentiary baseline at the next placement, and the cedent that meets the floor and stops there is preparing for the wrong audience.

Oklahoma AI governance FAQs

What is Oklahoma Bulletin No. 2024-11?
It is the bulletin the Oklahoma Insurance Department issued on November 14, 2024 adopting the NAIC Model Bulletin on the Use of AI Systems by Insurers. It tells insurers that existing Oklahoma insurance laws apply to any decision an AI system touches and expects each insurer to maintain a written AIS Program.
Which companies have to comply in Oklahoma?
Any insurer holding an Oklahoma certificate of authority, across property and casualty, life, and health lines.
Can our AIS Program use the NIST AI Risk Management Framework?
Yes. Bulletin 2024-11 states the AIS Program may adopt, incorporate, or rely on a framework developed by a recognized standards organization, such as the NIST AI Risk Management Framework v1.0, in whole or in part.
How will Oklahoma enforce it?
Through existing authority. The bulletin ties AI use to the unfair trade practices statute (36 O.S. §1204) and the Unfair Claims Settlement Practices Act (36 O.S. §1250.5), references the Corporate Governance Annual Disclosure Act, and preserves market conduct examination authority under the NAIC Market Regulation Handbook.
How does an Oklahoma insurer get ready?
Stand up a written AIS Program covering governance, risk management and internal controls, and third-party oversight, then keep model inventories, validation records, and a clear data-to-decision trail examination-ready.

Get audit-ready for Oklahoma Bulletin 2024-11

Swept AI supervises your models and produces the AIS Program evidence Oklahoma examiners can request.