Notice of Adoption - Amended Regulation 10-1-1 Governance and Risk Management Framework Requirements for Insurers’ Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models

The Division would like to provide notice that the Commissioner has adopted the following amended regulation:

• Amended Regulation 10-1-1 Governance and Risk Management Framework Requirements for Life Insurers’, Private Passenger Automobile Insurers’, and Health Benefit Plan Insurers’ Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models

This regulation establishes the governance and risk management requirements for insurers authorized to do business in Colorado and offering individual life insurance, private passenger automobile insurance, and/or health benefit plans that use external consumer data and information sources (ECDIS), as well as algorithms and predictive models that use ECDIS, in any insurance practice.

This amended regulation is effective on October 15, 2025.

Regulations that have been adopted, but are not yet effective can be found on the Division's website.