Colorado Reg 10-1-1 ("Governance and Risk Management Framework Requirements for Life Insurers' Use of External Consumer Data and Information Sources, Algorithms, and Predictive Models") is the first U.S. state-level rule that explicitly inventories the External Consumer Data and Information Sources (ECDIS) life insurers use in underwriting and pricing. Adopted in 2023 and operational across 2024-2026, it requires Colorado-admitted life carriers to maintain a documented governance framework, an algorithm inventory, bias-testing protocols, and consumer-facing disclosures for adverse underwriting outcomes driven by ECDIS or algorithmic models. The regulation reaches simplified-issue life insurance (typically $25K-$250K face amounts, often final-expense or guaranteed-issue-adjacent products) and accelerated underwriting (typically $100K-$5M face amounts on term-life jet paths) - exactly the products where ECDIS variables drive the most routing decisions. This lesson walks the ECDIS variable inventory required for life insurance - tobacco-flag data, prescription history, MIB code, motor vehicle records, public-records score, behavioral-data overlay - compares the routing logic of Munich Re's risk-assessment platform, Swiss Re Magnum, RGA AURA NEXT, and SCOR Velogica, produces the routing-decision memo with the ECDIS variables documented, the bias-test exhibit ready for the Reg 10-1-1 quarterly compliance report, and the consumer-facing adverse-routing disclosure that demonstrates Colorado-specific compliance discipline. The framework extends to NY DFS Circular Letter 2024-7's proxy test in other states that operate similar disclosure regimes by reference.

The ECDIS Inventory Reg 10-1-1 Requires

The Colorado regulation defines ECDIS broadly as data sourced from outside the consumer (the proposed insured) and outside the carrier's own historical data. Six ECDIS categories drive most accelerated and simplified-issue routing decisions: (1) Tobacco-flag data - composite signals from prescription history (nicotine replacement, varenicline), urine cotinine on paramedical exams, MIB tobacco-use codes, social-media inference (limited use, increasingly disfavored), and self-reported disclosure on application; (2) Prescription history - Milliman IntelliScript, ExamOne ScriptCheck, or LexisNexis MedAdvisor aggregated PBM data; (3) MIB code - Medical Information Bureau consortium codes from prior life-insurance applications; (4) Motor vehicle records - LexisNexis MVR or state-DMV-direct pulls returning violations, suspensions, and DUI history; (5) Public-records score - composite consumer-records score from LexisNexis Risk Solutions including civil filings, liens, bankruptcies, professional-license actions; (6) Behavioral-data overlay - limited and increasingly disfavored signals including digital-behavior inference, social-media residency, and credit-attribute summaries with documented permissible-purpose justification.

For each ECDIS category, the Reg 10-1-1 inventory documents: variable name; data source vendor; permissible-purpose and consumer-authorization basis (FCRA + HIPAA where applicable); variable refresh frequency; correlation with adverse-outcome rate by race/ethnicity (BISG-estimated), sex, and age; actuarial-justification analysis with mortality-experience citation; the accelerated-UW or simplified-issue rule that invokes the variable; and the platform (Magnum / AURA NEXT / Velogica / Munich Re RA) that encodes the rule. The inventory is submitted quarterly to the Colorado Division of Insurance; updates between submissions are logged for the next cycle. The DOI examiner can request the inventory at any time during a market-conduct examination.

How the Four Platforms Route on ECDIS

The four major accelerated-UW platforms encode ECDIS-driven routing through different rule-set architectures, though they converge on operationally similar outcomes for material signals. The comparison is most informative when viewing the routing logic side-by-side on the same hypothetical case mix.

Swiss Re Magnum

Magnum's routing tree on a $100K simplified-issue case: tobacco-flag triggers Magnum.Tobacco.Composite if any signal (Rx nicotine-replacement, MIB code, paramedical cotinine if scheduled) indicates current use; smoker class assignment with corresponding rate. Prescription history triggers per-Rx-category rules (Magnum.Rx.Antihypertensive, Magnum.Rx.Antidepressant, Magnum.Rx.Statin, etc.) with debit values aggregated to the case total. MIB hits trigger Magnum.MIB.[code].* rules per code category. MVR triggers Magnum.Driving.[pattern].* with knockout thresholds for DUI and major violations. Public-records score triggers Magnum.PublicRecords.[band].* with band-specific routing. Aggregated debit-equivalent against the carrier's simplified-issue class thresholds determines the routing decision: bind at applied-for class, bind at adjusted class with FCRA §615 notice trigger, knock out to traditional-UW review (which may add paramed), or decline with FCRA §615 notice.

RGA AURA NEXT

AURA NEXT's routing tree implements similar variable categories with RGA-specific rule libraries and the platform's confidence-band overlay. Tobacco-composite rules emphasize multi-source corroboration before tobacco-class assignment; single-signal tobacco indicators may produce medium-confidence routing with case-manager review rather than automatic re-class. Rx category rules use RGA's mortality library calibration. MIB rules align across platforms. Public-records integration emphasizes longitudinal pattern (recent civil filing vs. older resolved filing) over band-only scoring. The confidence-band output supports the carrier's case manager in routing borderline cases to manual review rather than auto-routing all decisions.

SCOR Velogica

Velogica's routing emphasizes documented rationale-narrative generation alongside rule-based outcomes. The variable categories align; the SCOR mortality library calibrates the debit values; the rationale-narrative output provides case-manager-readable explanation for each material rule fired. Velogica's particular strength is on cases with mixed-signal ECDIS profiles where multiple rules at modest debit aggregate to a routing decision; the narrative output explains the aggregation rather than leaving it implicit in the JSON.

Munich Re Risk-Assessment Platform

Munich Re's risk-assessment platform integrates with the Munich Re treaty structure and provides similar variable categories with Munich Re mortality calibration. The platform is particularly common on cases reinsured into Munich Re's facultative or automatic acceptance treaties. The routing output includes treaty-cession structured fields that integrate with the carrier's reinsurance-administration system.

The four platforms produce different documentation envelopes but operationally converge on similar outcomes for material signals. The carrier picks one platform as system of record per product; the routing-decision memo references the chosen platform's rule citations.

The Routing-Decision Memo with ECDIS Variables Documented

The routing-decision memo is the Reg 10-1-1-aligned file artifact for each accelerated-UW or simplified-issue case. Its structure: (1) Case identification with product (term-life accelerated-UW jet path / simplified-issue final-expense / etc.), face amount, applicant identification. (2) Each ECDIS variable consulted with: data source, pull date, version stamp, applicable consumer authorization (FCRA permissible purpose, HIPAA authorization, MIB consent), variable result. (3) Platform routing output: rule citations fired, debit values, confidence bands if applicable, routing instruction (bind / class adjustment / knockout / decline). (4) Carrier underwriting-guideline reference and class-threshold reference. (5) Routing decision with reasoning. (6) Bias-test reference: per-variable correlation report citation (Reg 10-1-1 variable-level documentation v[version]) and aggregate adverse-outcome correlation report citation. (7) Consumer-facing disclosure issued (if adverse) with reference to the FCRA §615 notice or carrier-specific adverse-routing disclosure. (8) Underwriter, case manager, and CCO sign-offs.

The memo is the durable record for the carrier's quarterly Colorado DOI submission; aggregated across cases, the memos support the inventory's accuracy. The memo is also the audit anchor against any individual-case examiner inquiry or consumer-complaint investigation. AI compresses the memo's structural drafting; the underwriter's review and signature attest to the personal review NAIC §4 and Reg 10-1-1 expect.

The Bias-Test Exhibit for the Quarterly Compliance Report

The Reg 10-1-1 quarterly compliance report includes the bias-test exhibit demonstrating that the carrier's accelerated-UW and simplified-issue models do not produce adverse outcomes that vary systematically by race/ethnicity, sex, or age beyond actuarially supportable variation. The bias-test methodology has standard structure: (1) Define the test population - accelerated-UW submissions in the quarter, simplified-issue submissions in the quarter, separated by product and class. (2) Estimate race/ethnicity per submission using Bayesian Improved Surname Geocoding (BISG) on surname + census-tract data, with documented limitations on accuracy by demographic group. (3) Compute adverse-outcome rates per BISG-estimated demographic group - knockout-to-traditional rate, decline rate, FCRA §615 notice issuance rate, class-distribution skew. (4) Compute statistical-significance tests on outcome-rate differences across groups, with confidence intervals. (5) For each material difference, perform a per-variable contribution analysis - which ECDIS variables drive the difference, and is their contribution actuarially justified per the carrier's filed underwriting guidelines.

The exhibit's narrative addresses: (1) the methodology's limitations (BISG estimation accuracy, sample size adequacy by quarter, statistical-significance threshold selection); (2) findings on outcome differences with magnitude and direction; (3) actuarial-justification analysis where differences exist; (4) remediation actions if differences exceed the carrier's filed thresholds; (5) forward-looking monitoring plan. AI compresses the exhibit's structural drafting and the standard analytical computations; the chief actuary and chief compliance officer review and sign the exhibit. The exhibit is submitted with the quarterly compliance report and is examiner-reviewable on demand.

The Consumer-Facing Adverse-Routing Disclosure

Reg 10-1-1 expects consumer-facing disclosure when ECDIS or algorithmic models drive adverse underwriting outcomes. The disclosure's content overlaps with but extends beyond the FCRA §615 notice: (1) Statement that the adverse outcome was driven in whole or in part by ECDIS or algorithmic model output. (2) Identification of the ECDIS categories used (without disclosing specific variable values or consumer-report content beyond what FCRA covers). (3) Consumer's right to request information about the variables used in the decision (within the limits of trade-secret protection and consumer-report restrictions). (4) Consumer's right to appeal or request reconsideration. (5) Identification of the consumer-affairs contact at the Colorado Division of Insurance. (6) Carrier contact for reconsideration. The disclosure is in addition to the FCRA §615 notice; many carriers issue the two as a combined communication with the Reg 10-1-1 elements layered onto the FCRA template.

The disclosure's compliance discipline: no medical-information disclosure beyond what consumer-authorization covers; no race/ethnicity references; no implication that ECDIS use itself was inappropriate (the use is filed and permitted); language consistent with Colorado-DOI-expected framing. AI drafts against the template; the underwriter and CCO review and release. The discipline supports Colorado-specific compliance posture; other states (NY, California, Washington) operate similar disclosure regimes that the same template can satisfy with state-specific adjustments.

NY DFS Circular Letter 2024-7 Extension to Other States

NY DFS Circular Letter 2024-7 ("Use of Artificial Intelligence Systems and External Consumer Data and Information Sources in Insurance Underwriting and Pricing") operates as a non-rule guidance with operational expectations similar to Colorado Reg 10-1-1. The proxy test framework is the most consequential element: identifying any ECDIS or AI system components that correlate with protected classes (race, color, national origin, sex, marital status, sexual orientation, gender identity, age, disability) and validating that the correlation is not driving adverse outcomes beyond actuarially supportable variation. NY DFS expects insurers to maintain documented governance, conduct bias testing, and report on the proxy test through periodic examinations.

Other states with similar regimes (Washington's WAC 284-83, California's evolving AI guidance through the CA Department of Insurance, Connecticut's Bulletin IC-49) operate with various degrees of formality. The 2026 carrier discipline is to maintain a single national framework - typically the Colorado-Reg-10-1-1-aligned framework - and adjust documentation for state-specific requirements. The bias-test exhibit produced for Colorado satisfies NY's proxy-test expectations with marginal adjustment; the routing-decision memo produced for Colorado satisfies WA's documentation expectations; the consumer-facing disclosure produced for Colorado satisfies most state-specific disclosure expectations with minor template adjustments. The discipline avoids the operational fragmentation of state-by-state documentation regimes.

What This Means for the L&H Underwriting Team

The L&H underwriting team's role under ECDIS-driven routing is documented oversight rather than mechanical decision-making. The accelerated-UW platform (Magnum / AURA NEXT / Velogica / Munich Re RA) executes the routing per the filed rule set; the underwriter reviews the platform output, applies professional judgment on borderline or anomalous cases, and signs the routing-decision memo. The case manager handles the operational workflow (paramed scheduling on knockout cases, APS coordination, applicant communication). The chief underwriter and chief medical director own the rule-set governance and the medical-criteria alignment. The chief compliance officer owns the Reg 10-1-1 governance framework, the quarterly compliance reports, the algorithm-inventory submissions, and the bias-test exhibits. The chief actuary owns the actuarial-justification analysis underlying the variable inclusions.

The cross-functional discipline is the carrier's structural advantage. Top-quartile carriers operate the discipline as routine; mid-market carriers operate it episodically with documentation gaps; below-median carriers operate it reactively in response to examination findings. The 2026 enforcement environment favors carriers with documented routine discipline; the rest face accumulating examination friction, fine exposure, and reputational risk. The investment to reach top-quartile discipline is modest in dollar terms but significant in cross-functional coordination demands; the return is durable across multi-year examination cycles and reinsurance-treaty renewal cycles.

Key Takeaways

• Colorado Reg 10-1-1 is the first U.S. state-level rule that explicitly inventories ECDIS in life-insurance underwriting and pricing. Adopted 2023, operational across 2024-2026, requires algorithm inventory, bias testing, consumer-facing disclosures, and quarterly compliance reports submitted to Colorado DOI.
• Six ECDIS categories drive routing: tobacco-flag composite, prescription history (IntelliScript / ScriptCheck / MedAdvisor), MIB code, MVR (LexisNexis or DMV-direct), public-records score (LexisNexis Risk Solutions), behavioral overlay. Each variable inventoried with source, refresh, correlation analysis, actuarial justification, and platform rule reference.
• Four platforms - Swiss Re Magnum, RGA AURA NEXT, SCOR Velogica, Munich Re risk-assessment - encode ECDIS-driven routing through different rule-set architectures with similar operational outcomes for material signals. Carrier picks one as system of record per product; AURA NEXT's confidence bands and Velogica's rationale narratives support borderline-case manual review.
• Routing-decision memo has eight structural sections: case ID, ECDIS variables consulted, platform output, underwriting-guideline reference, routing decision, bias-test reference, consumer-facing disclosure, sign-offs. AI compresses drafting; underwriter, case manager, and CCO sign attesting personal review.
• Bias-test exhibit demonstrates accelerated-UW and simplified-issue models do not produce adverse outcomes varying systematically by race/ethnicity (BISG-estimated), sex, or age beyond actuarial variation. Standard methodology: define population, estimate demographics, compute outcome rates, test significance, perform per-variable contribution analysis, document remediation if material differences exist.
• Consumer-facing adverse-routing disclosure extends FCRA §615 notice with Reg 10-1-1 elements: statement that ECDIS or algorithmic model drove the outcome, identification of ECDIS categories, right to request variable information, right to appeal, Colorado DOI consumer-affairs contact. Often issued combined with FCRA notice as single communication.
• NY DFS Circular Letter 2024-7 operates with similar expectations to Colorado Reg 10-1-1; other states (WA WAC 284-83, CA DOI guidance, CT Bulletin IC-49) operate similar regimes. 2026 discipline is single national framework Colorado-Reg-10-1-1-aligned with state-specific documentation adjustments.
• Cross-functional ownership: underwriter (case-level decisions), case manager (workflow), chief underwriter + chief medical director (rule-set governance), CCO (Reg 10-1-1 governance and reports), chief actuary (actuarial-justification analysis). The discipline produces durable advantage; sloppy operation produces accumulating examination friction.