Skip to content
AI Policy Generator

European Union · Guidance

EIOPA Opinion on AI governance and risk management in insurance

Regulator guidanceEIOPA AI Opinion

Summary

It explains how Solvency II and the Insurance Distribution Directive apply to AI. It creates no new obligations, but supervisors will use it to review insurers: data governance, documentation, fairness, explainability, cybersecurity and human oversight.

Who it applies to

Insurers and insurance distributors using AI (outside the AI Act's high-risk cases).

Penalties

The rule has no penalty regime of its own, or it does not apply.

Official name
EIOPA Opinion on Artificial Intelligence governance and risk management (EIOPA-BoS-25-360)
Official reference
EIOPA-BoS-25-360, 6 de agosto de 2025
Regulator
EIOPA; in Spain, the Directorate-General for Insurance and Pension Funds (DGSFP)
Official source
Check the sourceHow we verify sources

Key dates

Obligations and dates

Obligations table
ObligationArticle or citationStatusDateWho it applies toVerification
Risk-based AI governance in insuranceEIOPA-BoS-25-360Regulator guidanceAlready applicableInsurers and brokers using AI in pricing, claims, distribution or fraud.Verified in the official source on October 31, 2026

Risk-based AI governance in insurance

EIOPA-BoS-25-360Regulator guidance

Already applicable

When it relates
Insurers and brokers using AI in pricing, claims, distribution or fraud.
What the rule provides
  • AI governance policy with owners and per-use-case risk assessment.
  • System inventory and documentation, fairness and explainability testing matched to customer impact.
  • Human oversight and model cybersecurity.
Typical evidence
  • AI policy approved by the board.
  • Model inventory.
Verification
Verified in the official source on October 31, 2026Publication checked on EIOPA's official website (source cited in the research).

Regulatory change alerts by country

Pick the countries you care about and we will email you when we change a rule or an application date for those countries in our registry.

  • Changes to the rules of the countries you pick, when we add them to the registry.
  • New application dates.
  • No more than one email a week. Unsubscribe at any time.

It is a free, informational notice, not a legal monitoring service: it does not necessarily catch every change or within a set time.

Countries · Pick one or more.
US states
Email language
Manage my alerts

Find out what applies to you (free)