Colorado SB21-169 — Insurers' Use of External Consumer Data & AI
Colorado SB21-169 — Insurers' Use of External Consumer Data & AI — 100% of in-scope requirements covered.
4 requirements · 3 in scope (3 enforced) · 1 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.
Source: Colorado SB21-169 (codified at C.R.S. §10-3-1104.9) and the implementing Division of Insurance regulations prohibit insurers from using external consumer data and information sources, algorithms, or predictive models in a way that unfairly discriminates against consumers based on protected characteristics, and require insurers to test for, document, and remediate such discrimination, and to provide consumers with the reasons for adverse decisions. KYE Protocol™ governs whether an AI-assisted underwriting or claims decision relying on external data may PROCEED to a consequential adverse action — under a named authority, with a recorded adverse-action reason-code, with proxy-discrimination / fairness-evidence captured, and an appeal / contestability record. KYE™ does not price risk, choose the external data sources, or design the discrimination-testing methodology. · License: Colorado SB21-169 and the C.R.S. are public statutory works; KYE™ registry paraphrases each requirement's intent and cites the statutory section for mapping purposes only.
By category
| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
|---|---|---|---|---|---|---|
| Adverse-action reason explainability to the consumer | 1 | 1 | 0 | 0 | 0 | 100% |
| External-data proxy-discrimination evidence | 1 | 1 | 0 | 0 | 0 | 100% |
| Named-authority on the external-data-driven decision | 1 | 1 | 0 | 0 | 0 | 100% |
| External data source selection & pricing on the merits | 1 | 0 | 0 | 0 | 0 | 0% |
Every requirement → the KYE™ artefact that enforces it
| ID | Title | Status | KYE™ enforcement |
|---|---|---|---|
colorado-sb21-169.adverse-action-explainability | A consequential adverse action proceeds only with a recorded adverse-action reason-code + evidence | enforced | audit_events: kye.purpose.request.v1, kye.purpose.admissibility.v1, kye.evidence.decision_map.v1engines: internal, internalrule_packs: kye:rule-pack:insurance-underwriting-claimsdictionaries: internalconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/13-RESILIENCE-LOOP.md |
colorado-sb21-169.external-data-discrimination-evidence | Proxy-discrimination / fairness-evidence is captured before an external-data-driven decision proceeds | enforced | audit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1, kye.replay.proof.v1engines: internal, internalrule_packs: kye:rule-pack:insurance-underwriting-claimsconstitution_refs: constitution/13-RESILIENCE-LOOP.md, constitution/21-DELEGATED-AUDITABILITY.md |
colorado-sb21-169.external-data-decision-authority | An external-data-driven AI decision proceeds only under a recorded named-authority decision and appeal record | enforced | audit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1engines: internal, internalrule_packs: kye:rule-pack:insurance-underwriting-claimsconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/21-DELEGATED-AUDITABILITY.md |
colorado-sb21-169.external-data-source-selection-pricing | External data source selection and risk pricing on the merits | out-of-scope | (no enforcement cited) |
Canonical KYE™ surfaces referenced on this page: KYE Protocol™.