FEDERAL REGULATION · 5 MIN READ
NAIC Model Laws, Accreditation, and Solvency Oversight
Because insurance regulation is state-based, uniformity comes from the National Association of Insurance Commissioners (NAIC), which drafts model laws that states enact. The NAIC Financial Regulation Standards and Accreditation Program is the enforcement engine: to stay accredited, a state must adopt laws substantially similar to key models, which is why the models function almost like national standards even though the NAIC itself has no legal authority. On the market-conduct side, two models dominate. The Unfair Trade Practices Act (Model #880) prohibits misrepresenting policy terms and benefits (for example, advertising a homeowners policy as covering all risks without disclosing exclusions), along with twisting (inducing a policyholder to lapse existing coverage to buy replacement coverage) and rebating (returning premium or giving valuable consideration not specified in the policy). The Unfair Claims Settlement Practices Act (Model #900) lists prohibited claims behaviors - misrepresenting provisions, failing to acknowledge communications promptly, skipping reasonable investigations, refusing to settle when liability is clear - but regulatory liability generally requires that the conduct be a general business practice, not an isolated error. On the solvency side, the Insurance Holding Company System Regulatory Act (Model #440) requires prior commissioner approval for material affiliate transactions (a loan to the parent equal to 5 percent of admitted assets, for example), while small transactions need only notice and ordinary dividends within earned surplus are generally exempt. The Annual Financial Reporting Model Regulation (Model #205, the Model Audit Rule) was rewritten to mirror Sarbanes-Oxley section 404, requiring audited statutory statements, independent CPA opinions, audit-committee standards, and management reports on internal control over financial reporting. The Insurance Data Security Model Law (Model #668) requires every licensee - outside a small-licensee exemption - to maintain a Written Information Security Program (WISP) with administrative, technical, and physical safeguards, board oversight, annual CEO certification, and rapid reporting of cybersecurity events to the commissioner. Risk-Based Capital (RBC) formulas and the ORSA Model Act (#505) round out the solvency toolkit.
Watch it instead: NAIC Models, Accreditation, and Solvency Oversight6:39 interactive video · pauses twice to check youKey rules
NAIC accreditation forces states to enact substantially similar versions of key models.
The Financial Regulation Standards and Accreditation Program conditions a state's accredited status on adopting core solvency models such as the Model Audit Rule, giving the models near-national effect.
Why the exam cares: The exam tests why nonbinding NAIC models matter - the accreditation lever is the answer.
Model #880 prohibits misrepresentation, twisting, and rebating in sales and advertising.
Advertising coverage while hiding significant exclusions is misrepresentation of policy terms; twisting is replacement by deception; rebating is giving consideration not stated in the policy.
Why the exam cares: Classification questions describe a marketing practice and ask which prohibited act it is - keep the three labels straight.
Unfair claims practices trigger liability only as a 'general business practice.'
Under Model #900, a single isolated claims error does not violate the act; regulators must show the insurer commits prohibited acts with such frequency as to indicate a business practice.
Why the exam cares: A classic question asks what standard triggers regulatory action for claims handling - the general-business-practice threshold is the tested answer.
Material affiliate transactions need prior approval; small ones need only notice.
Model #440 uses a tiered system: a large loan from insurer to parent requires prior commissioner approval, modest reinsurance or service agreements require notice, and ordinary dividends within earned surplus are generally exempt.
Why the exam cares: Exam items list four affiliate transactions and ask which requires prior approval - pick the one big enough to threaten solvency.
Model #668 requires a WISP scaled to the licensee's size and data sensitivity.
The Written Information Security Program must contain administrative, technical, and physical safeguards, with board oversight, annual CEO certification, and 72-hour reporting of cybersecurity events to the commissioner.
Why the exam cares: Data-security questions ask for the core required document (the WISP) or the event-reporting deadline.
Numbers to memorize
- 72 hours — deadline under NAIC Model #668 to report a cybersecurity event to the commissioner
- 250 consumers — cybersecurity-event size referenced for reportable events under Model #668
- 10 employees — typical small-licensee exemption threshold under Model #668 (fewer than)
- 5% of admitted assets — example of a parent-company loan requiring prior approval under Model #440
- Model numbers — #880 unfair trade, #900 unfair claims, #440 holding company, #205 audit rule, #668 data security
Common traps
- Confusing twisting with rebating — remember twisting is deceptively inducing replacement of existing coverage, while rebating is returning premium or giving unlisted consideration.
- Treating one bad claims decision as an unfair claims practice — remember Model #900 requires a general business practice before regulatory liability attaches.
- Assuming all affiliate transactions need commissioner approval — remember Model #440 is tiered: notice for small deals, prior approval only for material ones, exemption for ordinary dividends.
- Confusing the Model Audit Rule's inspiration — remember Model #205 mirrors Sarbanes-Oxley section 404 internal-control attestation, extended to all admitted insurers rather than only SEC registrants.
Memorize the model numbers as a set (880 trade, 900 claims, 440 holding company, 205 audit, 668 data security) - the exam often names the model by number alone.
Test it before the exam does
Our P&C bank drills Federal Regulation with AI-explained answers. 20 questions free, no signup.
Taking the P&C exam in your state?
Studying for the Property & Casualty insurance exam? Track every lesson free — progress syncs with the app.
Start free