Insurance
82 regulations apply to this sector.
Written for this sector
AML REG PACKAGEInsurance firms are obliged entities under EU AML frameworkAMLAInsurance sector is within AMLA's supervisory scopeAMLD6Insurance companies are obliged entities under AMLD6BE UBO AMLInsurance sector named in AML/UBO obligations.Belgian AML LawInsurance firms explicitly named as obliged entities.Belgian Law 18/09/2017Insurance companies explicitly covered as obliged entities.CBM BelgiumNBB supervises insurance sector under Belgian prudential framework.COSO ERMInsurers adopt COSO ERM for enterprise-wide risk governanceDORAInsurers and reinsurers directly named in DORA scopeEBA ICT RiskInsurance entities under EBA oversight must apply ICT risk standardsEBA OutsourcingInsurance firms subject to equivalent outsourcing governance requirementsEU SanctionsInsurers must ensure sanctioned entities are not covered under policies.European Market Infrastructure RegulationInsurers using derivatives for hedging are in scope of EMIR obligations.FATF StandardsInsurance sector named in FATF recommendations for AML/CFT complianceFIDAFIDA explicitly includes insurance firms in open finance data sharing obligationsFit & ProperInsurers must ensure senior persons meet fit and proper standards.GLBAInsurance companies are explicitly covered by GLBA as financial institutions.Health Insurance Portability and Accountability ActHealth insurers are named covered entities under HIPAA.IFRSInsurance entities required to apply IFRS including IFRS 17.IFRS S1Insurers must disclose sustainability risks under IFRS S1 framework.IFRS S2Insurers disclose climate risk exposure as required by IFRS S2.IIA StandardsInsurers rely on IIA Standards to govern internal audit practices.ISO 22301Insurers must maintain operational resilience and continuity planning.ISO 22313Insurers apply ISO 22313 guidance to implement effective continuity systems.ISO 22317Insurers conduct BIA to identify critical functions and recovery priorities.MAS TRMMAS TRM applies to insurance entities regulated by MAS in Singapore.MAS TRM NoticeInsurance entities regulated by MAS are subject to TRM Notice requirements.NY DFS 504NY DFS supervises insurers subject to this regulationNY DFS Part 500NY DFS-licensed insurers explicitly in scopeNYDFS TPSPNY DFS-regulated insurers must manage TPSP cybersecurity risksOFACInsurers prohibited from transacting with sanctioned partiesOFAC SanctionsInsurers must not underwrite sanctioned entities or transactionsOFAC SDNInsurers must check policyholders against SDN listSanctions and Anti-Money Laundering Act 2018Insurance sector must comply with sanctions screening and AML requirements.SFDRInsurance-based investment products explicitly in scope of SFDR disclosure requirements.Solvency IISolvency II is the EU prudential regime written specifically for insurance and reinsurance undertakings.SYSC 15AApplies directly to FCA-regulated insurers under operational resilience rulesTCFDInsurers must disclose climate-related financial risks under TCFD frameworkUN Principles for Responsible InvestmentInsurance asset owners explicitly included as PRI signatories.Also applies
AI ActAI-driven risk profiling in insurance may be high-riskAML VENInsurers must apply AML controls for Venezuela-related transactionsBank Recovery and Resolution Directive 2014/59/EUCertain insurance entities within banking groups fall under BRRD scope.Basel IIIInsurance groups with banking subsidiaries subject to Basel III requirementsBE PSLInsurance firms dealing with securities fall under scope.BSAInsurance companies subject to BSA anti-money laundering requirements.CCPA/CPRAInsurers handling CA consumer personal information in scopeCLS FX SettlementInsurance firms with FX exposure may use CLS settlement servicesCRDSome insurance entities subject to related capital and prudential requirementsCRRSome financial conglomerates including insurers subject to CRR provisionsCRR/CRDSome conglomerate and group-level provisions touch insurance entities.CSRDInsurance companies within scope must report under CSRD.CSRD/ESRSInsurers apply ESRS as part of CSRD compliance obligations.CTIF/CFIInsurance entities subject to AML/CFT reporting obligations to CTIF.EBA GL Loan Orig MonSome insurance entities providing credit are indirectly affectedEBA Internal GovernanceInsurance firms under similar EBA-aligned governance expectationsESRB Stablecoin 2025Systemic risk assessment may extend to insurers exposed to crypto assets.EU Instant Payments Regulation 2024Insurance firms processing payments must support VoP-compliant transfers.EU Sanctions FrameworkInsurers must align underwriting with EU sanctions framework requirements.EU Sanctions RegimesInsurance coverage must exclude sanctioned entities across all regimes.EU TaxonomyInsurers must disclose taxonomy alignment of investment portfolios.EU TFRInsurance firms making fund transfers must comply with TFR data requirements.FAIRInsurers use FAIR for cyber risk modelling and underwriting decisionsFATF LATAMInsurance entities in LATAM jurisdictions subject to FATF-aligned AML requirementsFDX APIInsurance firms participating in open finance data sharingGDPRInsurers process policyholder personal and sensitive data under GDPR.IOSCO OP RESInsurers operating in capital markets apply IOSCO resilience principles.IOSCO ORInsurance firms in capital markets align with IOSCO operational risk guidance.IOSCO OutsourcingInsurance firms outsourcing functions apply IOSCO outsourcing guidance.ISAE 3000Applied for non-financial assurance engagements in insurance sectorISAE 3402Insurance firms use ISAE 3402 for outsourced processing and administrationISO 20022Used for insurance payment and financial messaging interoperabilityISO 23894Insurers manage risks from AI-driven underwriting and claims decision systems.ISO 27001Insurers implement ISO 27001 to protect sensitive policyholder information.ISO 31000Insurers apply risk management principles aligned to ISO 31000MARInsurance firms trading securities must comply with market abuse rules.MiFID IIInsurance-based investment products are partially subject to MiFID II rules.NIST AI RMFAI used in underwriting and claims requires risk framework compliance.Open Banking UKInsurance-related financial products may be offered via open bankingPFMIInsurance-related financial market activities may involve PFMI-regulated infrastructures.SEC Cyber DiscSEC-registered insurance entities must comply with cyber disclosure rules.SEC Cyber DisclosureSEC-registered insurance entities must comply with cyber disclosure rules.SEC REG SPSEC-registered insurance entities subject to customer data privacy requirements.TRIZ for Insurance
Worked contradictions and resolutions for this sector.
Insurance TRIZ