Start Here: 5 Things You MUST Know
McCarran-Ferguson Act (1945) = states regulate insurance, unless Congress specifically says otherwise. This is THE foundation.
5 types of rate regulation: Prior Approval, File-and-Use, Use-and-File, Flex Rating, No-File (Open Competition)
Risk-Based Capital (RBC) has 4 action levels, from Company Action (mildest) to Mandatory Control (regulator seizes the insurer)
NAIC is NOT a regulator -- it creates model laws, but each state must adopt them individually
Guaranty funds pay claims when insurers go insolvent -- typically up to $300,000 per claim
Overview: Why Regulation Matters for the Value Chain
Insurance is one of the most heavily regulated industries in the United States. Unlike banking or securities (which are federally regulated), insurance is primarily regulated by each individual state. This means insurers operating in all 50 states must comply with up to 50 different sets of rules. Regulation touches every part of the value chain -- from how policies are priced, to how claims are paid, to how much capital an insurer must hold.
Exam Alert!
The historical timeline (Paul v. Virginia through Dodd-Frank) is heavily tested. You need to know which case or law did what, and the specific YEARS. The 5 types of rate regulation are also a favorite exam question -- know the differences cold.
1. Why Insurance Is Regulated
Insurance regulation exists for three core reasons. Think of them as the three pillars holding up the system.
Protect Consumers
Insurance is complex. Buyers have far less information than sellers -- this is called information asymmetry. Regulators step in to level the playing field.
Ensure Solvency
If insurers cannot pay claims, the entire system collapses. Regulators enforce minimum capital requirements and monitor financial health.
Promote Fair Markets
Prevent price-fixing, unfair discrimination, and deceptive practices. Ensure a competitive marketplace where consumers have real choices.
Real-World Scenario: Why Information Asymmetry Matters
The Setup: Maria buys a homeowners policy online. The policy has a "water damage" exclusion buried on page 47. The marketing says "comprehensive protection for your home."
What Happens: A pipe bursts and floods her basement. Maria files a claim, confident she is covered.
The Result: Without regulation, the insurer could deny the claim based on fine print Maria never understood. Regulation requires clear policy language, mandated disclosures, and prohibits misleading marketing -- protecting consumers like Maria from information asymmetry.
2. The Historical Framework -- How We Got Here
The question of WHO regulates insurance has bounced between states and the federal government for over 150 years. This timeline is heavily tested -- memorize the years and what each case/law decided.
The Regulation Timeline
Paul v. Virginia
Supreme Court ruled insurance is NOT interstate commerce. Result: only STATES can regulate insurance. This stood for 75 years.
Memory Trick: "Paul says it is PERSONAL (state), not PUBLIC (federal)." Paul = Personal = State-level.
South-Eastern Underwriters Association (SEUA) Case
Supreme Court REVERSED Paul v. Virginia. Insurance IS interstate commerce. The federal government COULD now regulate insurance. This created panic in the industry.
Why panic? States had built entire regulatory systems over 75 years. Federal takeover would mean starting over. Congress had to act fast.
McCarran-Ferguson Act
Congress responded just ONE YEAR later. The deal: States keep regulating insurance, UNLESS Congress specifically passes a law saying otherwise. This is the foundation of modern insurance regulation.
Key nuance: McCarran-Ferguson does NOT say the federal government CAN'T regulate insurance. It says the federal government CHOOSES to let states do it -- for now. Congress can override state regulation anytime it wants to.
Gramm-Leach-Bliley Act (GLBA)
Financial modernization. Allowed banks, insurance companies, and securities firms to merge and sell each other's products. Broke down the old walls between financial industries.
Example: Before GLBA, your bank could NOT sell you insurance. After GLBA, companies like Citigroup could offer banking, insurance, and investment services all under one roof.
Dodd-Frank Act
Created the Federal Insurance Office (FIO) within the U.S. Treasury. FIO monitors the insurance industry, identifies regulatory gaps, and negotiates international insurance agreements. But here is the critical point: FIO does NOT directly regulate insurers.
Exam trap: FIO is a monitoring body, not a regulator. If the exam asks "which entity regulates insurance," FIO is the WRONG answer. States regulate. FIO watches.
Memory Trick: The Ping-Pong of Regulation
1869
States
1944
Federal
1945
Back to States
1999
Walls Down
2010
Fed Watches
3. State vs. Federal Regulation
Insurance is the ONLY major financial service regulated primarily at the state level. Banks, securities, and credit unions all have federal regulators. Insurance does not.
State Regulation
- Department of Insurance in each state
- Headed by a Commissioner (elected or appointed)
- Approves rates, forms, and licenses
- Conducts financial and market conduct exams
- Handles consumer complaints
- Enforces solvency requirements
Federal Role (Limited)
- FIO -- monitors, does not regulate
- NFIP -- federal flood insurance
- TRIA -- terrorism risk backstop
- FCRA/HIPAA -- privacy and data rules
- Antitrust enforcement (Sherman Act still applies)
- International trade agreements
The NAIC -- The Glue That Holds It Together
The National Association of Insurance Commissioners (NAIC) is the organization of all state insurance commissioners. It creates model laws and coordinates regulation across states. But here is the critical distinction:
The NAIC is NOT a regulator. It writes model laws, but those laws have NO legal force until a state legislature individually adopts them. Think of NAIC as the recipe writer -- each state decides whether to cook the dish, and some add their own ingredients.
NAIC Accreditation Program
The NAIC certifies that state insurance departments meet minimum regulatory standards. This creates consistency even though there is no federal regulator. If a state fails accreditation, other states may not accept its regulatory oversight of insurers domiciled there.
Real-World Scenario: Why 50 Sets of Rules Matter
The Setup: Nationwide Insurance wants to raise auto rates by 8% across all states due to rising repair costs.
What Happens: In a "prior approval" state like New York, they must file the increase, justify it with data, and wait for approval -- which could take months. In a "no-file" state, they can implement the increase immediately.
The Result: The same insurer, with the same cost pressures, faces completely different regulatory processes depending on which state the policyholder lives in. This is why insurers need large compliance departments.
4. How Regulation Touches Every Department
Regulation does not just sit in a compliance office. It affects underwriting, pricing, claims, marketing, and finance. Here is how it intersects with each part of the value chain.
4A. Underwriting Regulation
Prohibited Practices
- Unfair discrimination -- cannot use race, religion, national origin, or other protected classes as underwriting factors
- Redlining -- cannot refuse to insure entire neighborhoods based on the demographics of the people living there
- Permitted rating factors vary by state -- some states allow credit scores for auto insurance, others do not
Real-World Scenario: Redlining
The Setup: An insurer's data shows that claims are higher in zip codes 07101-07108 (Newark, NJ). The underwriting team proposes declining all new business in those zip codes.
What Happens: A state regulator reviews the company's underwriting guidelines and notices the blanket refusal pattern correlates with predominantly minority neighborhoods.
The Result: The regulator issues a cease-and-desist order. The insurer must underwrite risks individually based on legitimate factors (condition of property, claims history) -- NOT by drawing a red line around entire zip codes.
4B. Rate Regulation -- The 5 Types
Rates must be: adequate (enough to pay claims), not excessive (not gouging consumers), and not unfairly discriminatory (same risk = same price). How states enforce this varies by which of these 5 systems they use:
| Type | When Can You Use Rates? | Regulator Control | Speed |
|---|---|---|---|
| Prior Approval | Only AFTER regulator approves | Highest -- full review before use | Slowest |
| File-and-Use | Immediately after filing | Moderate -- filed, can be rejected later | Fast |
| Use-and-File | Use first, file within set period | Lower -- review happens after the fact | Fastest (with filing) |
| Flex Rating | Within approved band without filing | Moderate -- stays within limits | Fast (within band) |
| No-File / Open Competition | Anytime -- no filing required | Lowest -- market forces set rates | Fastest |
Memory Trick: Think of a Spectrum
From MOST regulator control to LEAST: Prior Approval → File-and-Use → Use-and-File → Flex Rating → No-File. Think: "Please File Using Flexible Numbers" (P-F-U-F-N).
Real-World Scenario: Flex Rating in Action
The Setup: A state uses flex rating with a +/- 7% band. An auto insurer currently charges $1,000/year for a standard driver.
What Happens: Repair costs rise 5%. The insurer raises the rate to $1,050 (a 5% increase) -- within the 7% band. No filing needed. But if they wanted a 10% increase to $1,100, they would need regulator approval because that exceeds the band.
The Result: Flex rating gives insurers speed for small adjustments while keeping large changes under regulator control. It is the middle ground between freedom and oversight.
4C. Claims Regulation
Unfair Claims Settlement Practices Act (NAIC Model)
This NAIC model law (adopted in most states) defines what insurers CANNOT do during claims:
- Misrepresenting policy provisions to avoid paying claims
- Failing to promptly acknowledge and act on claims
- Lowballing -- offering unreasonably low settlements to force acceptance
- Delaying investigation or payment without reasonable basis
- Bad faith -- failing to act in good faith toward the insured
Real-World Scenario: Bad Faith Claims Handling
The Setup: Tom's house is damaged by a tornado. His policy covers wind damage up to $300,000. The damage is clearly $180,000 based on three independent contractor estimates.
What Happens: The insurer sends their own adjuster who values the damage at $45,000. They refuse to explain the difference, ignore Tom's documentation, and delay responses for months.
The Result: Tom files a complaint with the state DOI. The regulator investigates and finds a pattern of lowball offers. The insurer faces fines, a market conduct exam, and Tom can sue for bad faith damages -- which in many states means the insurer pays MORE than the original claim amount.
4D. Market Conduct Regulation
Market conduct regulation examines HOW insurers behave in the marketplace. Regulators look at:
Examinations
Regular audits of insurer practices
Complaints
Tracking consumer complaint ratios
Anti-Rebating
Prohibiting kickbacks to buyers
Licensing
Producer qualifications and CE
5. Solvency Regulation -- Keeping Insurers Financially Sound
Solvency regulation ensures insurers have enough money to pay claims. This is the MOST critical type of regulation -- without solvent insurers, insurance is just a broken promise.
Minimum Capital and Surplus Requirements
Every state requires insurers to maintain a minimum amount of capital (money from investors) and surplus (assets minus liabilities). Think of surplus as the insurer's safety cushion -- if claims spike unexpectedly, surplus absorbs the blow.
Risk-Based Capital (RBC)
RBC is the modern solvency standard. Instead of a flat minimum, it measures how much capital an insurer needs based on the specific risks it takes. An insurer writing high-risk policies (hurricane-prone areas) needs more capital than one writing low-risk policies (small-town auto).
When an insurer's capital falls below certain RBC thresholds, escalating action kicks in. There are 4 action levels, from mildest to most severe:
Company Action Level
The mildest level. The insurer must submit a plan to the regulator explaining how it will fix its capital shortfall. The company is still in control.
Analogy: Your doctor says your cholesterol is a little high -- here is a diet plan, come back in 3 months.
Regulatory Action Level
The regulator gets involved. They can examine the insurer, issue orders, and require corrective actions. The regulator is now directing the fix.
Analogy: Your doctor says this is serious -- we are prescribing medication and monitoring you weekly.
Authorized Control Level
The regulator is authorized (but not required) to take control of the insurer. This is the "we CAN seize you" level.
Analogy: Your doctor says if things do not improve immediately, we are admitting you to the hospital.
Mandatory Control Level
The regulator MUST take control. No choice. The insurer is placed under receivership -- regulators run the company. This is the insurance equivalent of life support.
Analogy: You are in the ICU. The doctors are making all decisions now.
Memory Trick: C-R-A-M
The four levels spell CRAM: Company, Regulatory, Authorized, Mandatory. "CRAM for the exam -- remember the RBC levels!"
ORSA -- Own Risk and Solvency Assessment
Large insurers must conduct their own internal risk assessment (ORSA) and report it to regulators. Think of it as a self-exam: the insurer identifies its own risks and explains how it plans to stay solvent. This is in ADDITION to the regulator's RBC analysis.
Guaranty Funds -- The Safety Net
When an insurer goes insolvent, who pays the claims? Guaranty funds -- funded by assessments on all the OTHER insurers in the state. Every state has one.
How They Work
- All licensed insurers contribute via assessments
- Activated when an insurer is declared insolvent
- Pay policyholder claims up to the state's limit
- Typically cap at $300,000 per claim
Critical Limitation
- Only covers admitted (licensed) insurers
- Surplus lines policies = NO guaranty fund
- Limits vary by state
- Not pre-funded like FDIC -- assessed after insolvency
Real-World Scenario: Insurer Insolvency and the Guaranty Fund
The Setup: Sunshine Mutual Insurance writes homeowners policies in Florida. A massive hurricane season depletes their reserves. Their RBC ratio drops below the mandatory control level.
What Happens: The Florida DOI places Sunshine Mutual into receivership. They have 10,000 open claims totaling $500 million. The guaranty fund is activated.
The Result: The guaranty fund pays claims up to $300,000 each. Policyholders with claims above $300,000 receive the cap and become unsecured creditors for the rest. Every other licensed insurer in Florida gets assessed to fund these payments -- which may cause them to raise THEIR premiums.
6. Surplus Lines Market
The surplus lines market exists for risks that the standard (admitted) market will not cover. Think of unusual, high-risk, or specialty exposures -- celebrity body parts, large construction projects, nightclub liability.
Admitted (Standard) Market
- Licensed in the state
- Rates and forms approved by regulator
- Covered by guaranty fund
- Must follow all state regulations
Non-Admitted (Surplus Lines)
- NOT licensed in the state
- More flexibility in rates and forms
- NO guaranty fund protection
- Accessed through licensed surplus lines brokers
NRRA -- Nonadmitted and Reinsurance Reform Act
Before the NRRA, surplus lines taxes had to be paid to every state where the risk was located -- a nightmare for multi-state risks. The NRRA simplified this: surplus lines tax is paid only to the insured's home state.
Real-World Scenario: Why Surplus Lines Exist
The Setup: A special effects company in Hollywood needs insurance for pyrotechnic stunts. They approach five standard insurers -- all decline. The risk is too unusual.
What Happens: A surplus lines broker places the coverage with Lloyd's of London (a non-admitted insurer in California). The premium is high, the form is customized, and there is no guaranty fund backup.
The Result: The company gets coverage that would otherwise be unavailable. The tradeoff: if Lloyd's failed to pay, California's guaranty fund would NOT step in. Surplus lines = more flexibility, less safety net.
7. Government Insurance Programs
When private insurers cannot or will not provide coverage for certain catastrophic risks, the government steps in. These programs fill critical gaps in the market.
NFIP -- National Flood Insurance Program
Federal program providing flood insurance, since most private insurers will not cover flood. Administered by FEMA.
Risk Rating 2.0 (2021-2022): Modernized NFIP pricing. Instead of using outdated flood zone maps, Risk Rating 2.0 uses property-specific factors -- distance to water, flood type, cost to rebuild. Result: more accurate but often higher premiums for high-risk properties.
FAIR Plans -- Fair Access to Insurance Requirements
State-run programs providing property insurance in high-risk areas where private insurers have withdrawn. Every licensed insurer in the state shares the risk.
Current example: The California FAIR Plan has grown massively due to wildfire-driven insurer withdrawals. State Farm, Allstate, and others stopped writing new homeowners policies in wildfire-prone areas, pushing thousands of homeowners into the FAIR Plan as a last resort.
TRIA/TRIPRA -- Terrorism Risk Insurance
After 9/11, private insurers excluded terrorism. Congress created TRIA as a federal backstop. The government shares the cost of catastrophic terrorism losses with private insurers. Currently reauthorized through 2027.
TRIA Key Numbers to Memorize
$5M
Certification threshold (Treasury must certify as terrorism)
$200M
Program trigger (industry losses must exceed this)
80%
Federal share (government pays this % above deductible)
$100B
Annual cap on federal payouts
Real-World Scenario: How TRIA Works
The Setup: A certified act of terrorism destroys several office buildings in a major city. Total insured losses reach $10 billion. An insurer, MegaCorp Insurance, has $500 million in terrorism-related claims and a TRIA deductible of $100 million.
What Happens: MegaCorp pays its $100M deductible first. Of the remaining $400M, the federal government pays 80% ($320M) and MegaCorp pays 20% ($80M).
The Result: MegaCorp's total out-of-pocket: $180M ($100M deductible + $80M co-share) instead of the full $500M. Without TRIA, MegaCorp might not even offer terrorism coverage -- and building owners would be uninsurable against this risk.
Quick Reference: Key Numbers and Dates
1869
Paul v. Virginia -- states regulate
1944
SEUA -- feds COULD regulate
1945
McCarran-Ferguson -- states keep it
1999
GLBA -- financial modernization
2010
Dodd-Frank -- FIO created
$300K
Typical guaranty fund cap
$5M
TRIA certification threshold
$200M
TRIA program trigger
80%
TRIA federal share
$100B
TRIA annual cap
Cheat Sheet
Print this page for quick referenceWhy Regulate?
Consumer protection, solvency, fair markets
McCarran-Ferguson (1945)
States regulate unless Congress says otherwise
NAIC
Model laws, NOT a regulator. States must adopt individually.
FIO (Dodd-Frank 2010)
Monitors insurance. Does NOT regulate.
Rate Regulation Types
Prior Approval, File-and-Use, Use-and-File, Flex, No-File
RBC Action Levels
CRAM: Company, Regulatory, Authorized, Mandatory
Guaranty Funds
Pay claims of insolvent admitted insurers. ~$300K cap. No surplus lines.
Surplus Lines
Non-admitted, flexible rates/forms, NO guaranty fund
NFIP
Federal flood insurance. Risk Rating 2.0 = property-specific pricing.
TRIA Key Numbers
$5M cert, $200M trigger, 80% fed share, $100B cap, thru 2027
Exam Trap Alerts
1. McCarran-Ferguson Does NOT Prohibit Federal Regulation
Students often think McCarran-Ferguson says the federal government CANNOT regulate insurance. Wrong. It says the federal government CHOOSES to let states regulate -- unless Congress specifically passes a law overriding state regulation. Congress retains full authority to step in anytime.
2. SEUA (1944) vs. McCarran-Ferguson (1945) -- The One-Year Reversal
The SEUA case said the feds COULD regulate. McCarran-Ferguson (just one year later) said the feds would NOT regulate -- for now. If the exam asks "which case established federal authority over insurance," the answer is SEUA. If it asks "which law preserved state regulation," the answer is McCarran-Ferguson.
3. File-and-Use vs. Use-and-File -- They Sound the Same!
File-and-Use: you FILE first, then USE immediately. You still file before using. Use-and-File: you USE first, then FILE later. The first word tells you what comes first. If the exam describes "insurer implements rates then files within 30 days," that is Use-and-File, not File-and-Use.
4. RBC: Authorized vs. Mandatory Control
At the Authorized Control Level, the regulator CAN take control but does not HAVE to. At the Mandatory Control Level, the regulator MUST take control -- no discretion. The exam loves testing whether "authorized" means optional or required. Answer: Authorized = optional. Mandatory = required.
5. NAIC Is NOT a Regulator
The NAIC creates model laws and coordinates regulation, but it has NO regulatory authority. It cannot fine insurers, revoke licenses, or enforce rules. Only individual STATE insurance departments can do that. If the exam asks "who enforces insurance regulations," the answer is the state DOI -- never the NAIC.
6. FIO Monitors, Does NOT Regulate
The Federal Insurance Office was created by Dodd-Frank to monitor the industry and advise Congress. It does NOT approve rates, license insurers, or examine companies. If the exam asks about a "federal insurance regulator," FIO is the wrong answer -- there is no federal insurance regulator.
7. Surplus Lines = NO Guaranty Fund
Guaranty funds ONLY cover admitted (licensed) insurers. If a surplus lines insurer becomes insolvent, policyholders are on their own. This is the tradeoff for the flexibility and broader coverage that surplus lines provide. The exam may present a scenario where a non-admitted insurer fails and ask about guaranty fund coverage -- the answer is NO.
8. Guaranty Funds Are NOT Pre-Funded Like FDIC
Unlike the FDIC (which has a standing fund), insurance guaranty funds are typically funded AFTER an insolvency through assessments on surviving insurers. This means there can be a delay in payments, and the cost is ultimately passed to other policyholders through higher premiums.
Quick Reference Summary
3 Reasons for Regulation
Consumer protection, solvency, fair markets
Paul v. Virginia (1869)
Insurance is NOT interstate commerce -- states regulate
SEUA Case (1944)
Reversed -- insurance IS interstate commerce
McCarran-Ferguson (1945)
States keep regulating unless Congress overrides
GLBA (1999)
Banks + insurers + securities can merge
Dodd-Frank / FIO (2010)
Federal Insurance Office monitors, does NOT regulate
Rate Regulation Types
Prior Approval (strictest) to No-File (most free)
RBC Action Levels
CRAM: Company, Regulatory, Authorized, Mandatory
Guaranty Funds
~$300K cap, admitted only, post-funded
Surplus Lines
Non-admitted, flexible, NO guaranty fund
NFIP
Federal flood insurance, Risk Rating 2.0
TRIA
$5M cert, $200M trigger, 80% fed, $100B cap