Workflow FoundationsChapter 4120 min read

Regulation & Compliance, state-based regulation, the NAIC, and the federal touchpoints that actually matter.

U.S. insurance is regulated state by state under a federal carve-out (McCarran-Ferguson) that has stood for 80 years. Each state insurance department oversees licensing, solvency, market conduct, and rate and form filings. The NAIC coordinates through model laws and standardized statutory reporting, but the actual regulatory authority is state-by-state. A handful of federal touchpoints (TRIA, ERISA, NRRA, Dodd-Frank) overlay specific issues without displacing the state-based core.

§ 01

The mental model

Insurance in the United States is primarily regulated by individual states, not by the federal government. Each state insurance department licenses carriers, approves products, oversees solvency, regulates market conduct, and enforces consumer protection. The federal government has limited direct insurance regulatory authority and operates only at the edges where federal interests dominate or where state-by-state regulation would create unworkable inconsistencies.

This structure is the result of a specific historical decision (the McCarran-Ferguson Act of 1945) that codified state primacy after a Supreme Court decision threatened to make insurance subject to federal commerce regulation. The state-based system has persisted because it provides 50 laboratories of regulation, supports local consumer protection, and has been actively defended by state insurance departments and (for the most part) by the industry itself. The trade-off is fragmentation: 50 different sets of statutes, 50 different regulatory bodies, and significant compliance overhead for any carrier doing business in multiple states. The NAIC partially addresses this through model laws and standardized statutory reporting, but the underlying authority remains state-by-state. Understanding which state regulates what (and how the NAIC coordinates) is foundational for any compliance, product development, or operational conversation in U.S. commercial insurance.

Anchor concept

U.S. insurance regulation is state-by-state with NAIC coordination, not federal with state implementation. The order of authority matters: each state has the power to regulate insurance within its borders; the NAIC has no statutory authority but produces model laws that states adopt; the federal government has authority only in specific carve-outs.

§ 02

State-based regulation

Every state has an insurance department headed by a commissioner, superintendent, or director. The department's authority covers virtually every aspect of the insurance business in the state.

Core regulatory functions

  • Carrier licensing. Admitting carriers to operate in the state, reviewing financial qualification, monitoring ongoing fitness.
  • Producer licensing. Licensing brokers, agents, and surplus lines brokers; setting education and continuing education requirements.
  • Product filings. Reviewing and (in many cases) approving policy forms before they can be used.
  • Rate filings. Reviewing rate filings for actuarial soundness, statutory compliance, and (for prior-approval lines) approving rates before use.
  • Solvency oversight. Monitoring carrier financial condition through statutory financial reporting, examinations, and risk-based capital analysis.
  • Market conduct. Investigating consumer complaints, conducting market conduct examinations, enforcing fair claims practices.
  • Receivership. Managing carrier insolvencies and winding up failed carriers' obligations.
  • Guaranty fund administration. Operating the state guaranty fund that pays claims of insolvent carriers.

Department structure

Larger state insurance departments (California, New York, Florida, Texas, Illinois) have dedicated divisions for each function: financial regulation, market regulation, consumer services, investigations, fraud, captive insurance. Smaller state departments combine functions but cover the same regulatory landscape.

The commissioner / superintendent

The head of the state insurance department is appointed by the governor in most states (elected in some). The commissioner has substantial discretionary authority on questions of regulatory enforcement, penalty assessments, and policy interpretation. Insurance commissioners are politically accountable; they often face pressure from consumer advocates, industry groups, and the legislature.

§ 03

The McCarran-Ferguson Act

The 1945 federal statute that established state primacy in insurance regulation. It is the legal foundation of the state-based system.

The historical context

Until 1944, insurance was generally not considered "commerce" subject to federal regulation. The Supreme Court's decision in U.S. v. South-Eastern Underwriters Association (1944) reversed that position, holding that insurance was indeed interstate commerce subject to federal antitrust law. Congress responded with the McCarran-Ferguson Act, which preserved state insurance regulation against federal preemption in most circumstances.

What McCarran-Ferguson does

  • Preserves state authority. States retain the power to regulate the business of insurance.
  • Limits federal preemption. Federal statutes do not preempt state insurance regulation unless they specifically intend to do so.
  • Antitrust exemption. Activities that constitute the business of insurance are exempt from federal antitrust law to the extent they are regulated by states.

The "business of insurance" test

The antitrust exemption applies to activities that constitute the business of insurance. Courts have developed a three-factor test (the Pireno factors): the activity must spread or transfer risk, the activity must be an integral part of the policy relationship between insurer and insured, and the activity must be limited to entities within the insurance industry. Activities outside this test (e.g., third-party administrative services to non-insurance clients) do not benefit from the exemption.

Federal carve-outs

Congress has periodically created exceptions to McCarran-Ferguson where federal interests dominate. ERISA preempts state regulation of self-funded employee benefit plans. The TRIA program creates federal terrorism reinsurance. The NRRA creates uniform surplus lines tax rules. Each carve-out is narrowly defined; the broader state-based system continues to govern.

§ 04

The NAIC and model laws

The National Association of Insurance Commissioners is the standards-setting body that coordinates state regulation. It is not a regulator itself.

What NAIC does

  • Model laws and regulations. Drafts model statutory and regulatory language that states can adopt. Most state insurance laws are based on NAIC model legislation.
  • Statutory accounting principles (SAP). Maintains the SAP framework that governs insurance company financial reporting in the U.S.
  • Annual statement and quarterly statement. Standardized financial reporting forms used across all states.
  • Risk-Based Capital (RBC) framework. Capital adequacy methodology adopted by states.
  • Insurance Regulatory Information System (IRIS). Financial monitoring tools for early detection of carrier financial problems.
  • Producer database. Through NIPR, supports the operational mechanics of producer licensing.
  • Surplus lines coordination. Through the IID list, identifies eligible alien insurers for state surplus lines compliance.
  • Examiner accreditation. Accredits state insurance department examination practices to support reciprocal examination.

Model law adoption

NAIC produces models; states decide whether to adopt them. Some models are widely adopted (the credit for reinsurance model, the holding company model). Others are adopted with state-specific modifications. Some are rejected by significant state populations. The non-uniform adoption is the source of much state-by-state regulatory variation.

The accreditation program

States that meet defined NAIC accreditation standards are eligible for cross-state recognition of solvency examinations. Accreditation requires adoption of specific model laws and regulatory practices. The accreditation program creates leverage for NAIC model-law adoption that the NAIC otherwise lacks as a non-statutory body.

§ 05

Rate and form filings

The most operationally consequential aspect of state regulation for the day-to-day business of insurance.

Form filings

Most policy forms must be filed with the state insurance department before they can be used. Filing requirements vary by line and by state but typically apply to policy jackets, endorsements, and significant amendments.

Filing types

  • Prior approval. The form cannot be used until the state explicitly approves it.
  • File-and-use. The form can be used after a defined waiting period unless the state objects.
  • Use-and-file. The form can be used while the filing is pending.
  • Exempt. Some forms or some lines are exempt from filing (large commercial, surplus lines).

Rate filings

Rate filings include the rate itself, the actuarial support, and the rating procedures. Filing requirements also vary by line and state.

Rate filing components

  • The proposed rate change (overall and by territory, class, etc.).
  • Actuarial support: loss experience analysis, trend analysis, expense analysis, profit provision.
  • The rate manual reflecting the proposed rates.
  • Class plan changes: any changes to class definitions or rating territories.
  • Schedule mod and LCM filings.

SERFF

The System for Electronic Rate and Form Filing is the NAIC-operated electronic filing platform used by most states. Carriers submit filings through SERFF, states review and respond through SERFF, and the documentation flows through a single platform across most states (though state-specific requirements still apply).

Filing speed considerations

Filing approval speed varies enormously by state and by line. Some states process simple filings within days; others take months. Complex or politically sensitive filings can take a year or more. Carriers planning product launches build filing timelines into their go-to-market plans accordingly.

§ 06

Solvency regulation

The financial regulation of insurance carriers is the single most consequential regulatory function. Carrier insolvency is the worst outcome the system is designed to prevent.

The financial reporting framework

  • Annual statement. Comprehensive financial report filed by every carrier with every state where it is licensed. Filed by March 1 for the prior calendar year.
  • Quarterly statement. Abbreviated financial report filed quarterly (45 days after quarter-end).
  • Audited financial statements. Annual audited financials filed by June 1.
  • Actuarial opinion. Annual statement of actuarial opinion on reserve adequacy.
  • ORSA report. Own Risk and Solvency Assessment, filed by larger carriers, providing the carrier's own view of its risk and capital adequacy.

Risk-Based Capital (RBC)

The RBC framework is the standardized capital adequacy methodology used by states. Carriers calculate required capital based on a defined risk-based formula and report the result with the annual statement. Carriers below RBC trigger thresholds face escalating regulatory action: company action, regulatory action, authorized control, mandatory control. Most carriers operate well above the trigger thresholds; those approaching trigger levels are under intensified regulatory scrutiny.

Financial examinations

States conduct periodic financial examinations of licensed carriers, typically every 3-5 years. The examinations review accounting records, claims practices, reinsurance arrangements, and overall financial soundness. Findings can result in corrective orders, financial restrictions, or (in severe cases) referral to receivership.

Receivership and the guaranty fund

When a carrier becomes insolvent, the state insurance department initiates a receivership proceeding to wind down the carrier's obligations. The state guaranty fund (funded by assessments on solvent carriers) pays covered claims up to defined limits. Surplus lines policies are typically not covered by guaranty funds; that exposure is one of the trade-offs of surplus lines coverage.

§ 07

Market conduct

The other half of state regulation. Where solvency regulation focuses on whether the carrier can pay claims, market conduct regulation focuses on whether the carrier is treating policyholders fairly.

Market conduct examinations

States conduct market conduct examinations to review how the carrier handles claims, underwriting, marketing, and policyholder communications. The exams sample claim files and underwriting files and assess compliance with state-specific fair claims practices, prompt-payment laws, and consumer protection requirements. Findings can result in fines, corrective orders, or (in egregious cases) license actions.

Unfair claims practices

Every state has unfair claims practices statutes prohibiting specific carrier behaviors:

  • Misrepresenting policy provisions.
  • Failing to acknowledge claims promptly.
  • Failing to investigate claims diligently.
  • Compelling policyholders to litigate by offering substantially lower amounts than the eventual recovery.
  • Delaying payment without justification.
  • Settling claims for substantially lower amounts than ultimately recovered when policyholders did not retain counsel.

Bad faith

Some states recognize a private cause of action for bad faith claim handling. A carrier that violates fair claims practices can be liable not only for the policy proceeds but also for consequential damages, attorneys' fees, and (in some states) punitive damages. The bad faith exposure shapes carrier claim handling practices and is a significant focus of carrier internal compliance.

Consumer complaints

State insurance departments operate consumer complaint divisions that intake and investigate policyholder complaints. Complaint volume and resolution rates are tracked by carrier; persistent complaint patterns can trigger market conduct examinations.

§ 08

Federal touchpoints

Despite McCarran-Ferguson, several federal statutes reach into insurance regulation in specific ways.

ERISA

The Employee Retirement Income Security Act preempts state regulation of self-funded employee benefit plans. ERISA-based health benefit plans (which dominate U.S. employer-provided health coverage) are subject to federal rules rather than state insurance regulation. ERISA also creates the regulatory framework for fiduciary liability coverage (Chapter 17).

Dodd-Frank and the Federal Insurance Office (FIO)

The 2010 Dodd-Frank Act created the Federal Insurance Office within the Treasury Department. The FIO has limited authority: monitor the insurance industry, represent the U.S. in international insurance discussions, and identify gaps in regulation. It has no rulemaking authority over insurance carriers. The FIO has been a quiet office that has not significantly altered the state-based system.

TRIA

The Terrorism Risk Insurance Act creates a federal reinsurance backstop for terrorism losses on commercial property and casualty policies. TRIA originally enacted in 2002, reauthorized multiple times, currently in force through 2027. Carriers must offer terrorism coverage on commercial policies; the federal government provides a backstop above defined deductibles. The mechanics flow through Treasury's Office of Tax Analysis and have minimal direct interaction with state insurance regulation.

NRRA

The Nonadmitted and Reinsurance Reform Act (Chapter 27) reformed surplus lines taxation and broker licensing in 2010. The NRRA preempts state-by-state taxation of multi-state surplus lines policies and creates uniform broker licensing standards.

OFAC

The Office of Foreign Assets Control administers economic sanctions. Insurance carriers must screen policyholders, claimants, and counterparties against OFAC sanctions lists. OFAC compliance is a continuous operational requirement and creates real exposure for carriers operating in cross-border markets.

Federal antitrust

Despite the McCarran-Ferguson exemption, federal antitrust law applies to activities outside the "business of insurance" test. Mergers and acquisitions, joint venture arrangements with non-insurance partners, and certain distribution agreements can be subject to federal antitrust review.

§ 09

Where IDP earns its keep

Regulatory compliance generates substantial documentation flowing both into and out of the carrier. Annual statements, rate and form filings, financial examinations, market conduct examinations, consumer complaints, OFAC screening hits. The documents are heterogeneous in format but consistent in their compliance importance.

1
Intake
Regulatory correspondence arrives from state departments, federal agencies, NAIC.
2
Classify
Identify regulatory body, document type (filing response, examination request, complaint, sanctions notice).
3
Extract
Citation references, response deadlines, specific issues raised, actions required.
4
Validate
Cross-check against compliance calendar, verify routing to responsible function, flag deadline-driven items.
5
Triage
Route to compliance team with structured response template and supporting data.
6
Underwriter
Compliance team produces response with full operational context.
Indico use cases for compliance operations

The compliance function is document-intensive in distinctive ways. Regulatory correspondence intake and classification: state department letters, market conduct examination requests, consumer complaint forwards, financial examination findings. Filing response support: extracting cited issues from state department feedback and routing to product, actuarial, or claims teams. OFAC and sanctions screening: extracting names and addresses from policy applications, claim files, and treaty documents for screening against sanctions lists. Annual statement preparation support: extracting required disclosures from underlying source documents for inclusion in regulatory filings.

Chapter 41 · Workflow Foundations · 20 min read

Regulation & Compliance — Cheat Sheet

U.S. insurance is regulated state by state under a federal carve-out (McCarran-Ferguson) that has stood for 80 years. Each state insurance department oversees licensing, solvency, market conduct, and rate and form filings. The NAIC coordinates through model laws and standardized statutory reporting, but the actual regulatory authority is state-by-state. A handful of federal touchpoints (TRIA, ERISA, NRRA, Dodd-Frank) overlay specific issues without displacing the state-based core.

The mental model: U.S. insurance regulation is state-by-state with NAIC coordination, not federal with state implementation. The order of authority matters: each state has the power to regulate insurance within its borders; the NAIC has no statutory authority but produces model laws that states adopt; the federal government has authority only in specific carve-outs.

Key terms

McCarran-Ferguson · 1945 federal preservation of state insurance regulation
NAIC · National Association of Insurance Commissioners
SAP · Statutory Accounting Principles
RBC · Risk-Based Capital framework
ERISA · Federal preemption of self-funded benefit plans
TRIA · Terrorism Risk Insurance Act
OFAC · Federal economic sanctions enforcement

If you remember three things

U.S. insurance is regulated state by state under the McCarran-Ferguson framework, with each state insurance department holding independent authority over licensing, solvency, and market conduct. The NAIC coordinates through model laws and standardized statutory reporting but has no statutory authority of its own. Federal touchpoints (ERISA, Dodd-Frank/FIO, TRIA, NRRA, OFAC) overlay specific issues but do not displace the state-based core.