--- title: "EU AI Act for German Insurers: High-Risk AI Compliance Guide (2026)" description: "EU AI Act classifies insurance AI as high-risk. Underwriting, pricing, and claims obligations for German insurers — with a practical compliance checklist." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/ai-act/insurance/" language: "en" --- ![EU AI Act high-risk insurance compliance Germany underwriting claims](https://compound.law/assets/images/ai-act/ai_act_4.webp) ai-act # EU AI Act for German Insurers: High-Risk AI Compliance Guide (2026) 26 April 2026 Which insurance AI is high-risk under the EU AI Act? The EU AI Act classifies insurance AI as high-risk — specifically automated underwriting, premium calculation, and claims decisions for natural persons. German insurers must classify their AI systems and implement a quality management system before August 2026. - Automated underwriting for natural persons is explicitly high-risk under Annex III EU AI Act. - AI that denies claims or determines payout amounts carries full high-risk obligations. - Prohibited: social scoring, biometric categorisation based on vulnerability, exploitation of weaknesses. - August 2026 deadline: all high-risk AI systems must be registered and compliant. The **EU AI Act** regulates insurance AI directly and comprehensively. Automated underwriting, AI-driven premium calculation, and systems that evaluate or deny claims are classified as high-risk under **Annex III, point 5(b)** of Regulation (EU) 2024/1689. German insurers and insurtechs must reach full high-risk compliance by **August 2026** — including a quality management system, bias testing, technical documentation, and human oversight. For a full overview of the EU AI Act framework, see our [EU AI Act guide](https://compound.law/en-DE/ai-act/). BaFin coordinates enforcement for the German insurance sector. ## Does the EU AI Act Apply to Insurance Companies? Yes. The EU AI Act applies directly across all EU member states — no national implementing legislation required. For German insurers, this means: any organisation using AI that influences policy decisions, premiums, or claims for natural persons is subject to the high-risk obligations of the Regulation. The Regulation covers insurance companies in two roles: - **Provider:** Any organisation that develops or places a high-risk AI system on the market carries the full obligations under Articles 9–17 EU AI Act. - **Deployer:** Any organisation using a third-party high-risk AI system in an insurance context carries deployer obligations — particularly human oversight, logging, and user information requirements. The Regulation applies equally to established insurers, insurtechs, and embedded-insurance providers. ## Which AI Systems Are High-Risk in Insurance? Annex III, point 5(b) EU AI Act classifies AI systems as high-risk when used for risk assessment and pricing for natural persons, claims evaluation, or verification of insurance entitlements. Classification is purpose- and context-dependent. **High-risk AI in insurance:** - Automated underwriting for natural persons (risk scoring, coverage decisions) - AI-driven premium calculation (dynamic pricing, telematics-based tariffs) - Eligibility determination systems (decisions on insurability) - AI that denies claims or determines payout amounts - Fraud detection with final decision authority over claims **Lower-risk AI in insurance:** - Chatbots and virtual assistants for general customer service (transparency obligation under Art. 50 EU AI Act still applies) - Internal solvency models for Solvency II reporting without individual coverage decisions - Fraud-flagging systems that route cases for human review - Process automation without decision authority over claims Our [AI insurance underwriting compliance](https://compound.law/en-DE/compliance/ai-insurance-underwriting/) guide maps these obligations in detail. For document-heavy claims workflows, see our [AI document analysis compliance](https://compound.law/en-DE/compliance/ai-document-analysis/) resource. ## Prohibited AI Practices for Insurers Beyond high-risk classification, **Article 5** of the EU AI Act establishes absolutely prohibited AI practices that have applied since **February 2025**. For insurers: - **Social scoring:** AI systems that evaluate natural persons based on social behaviour or personal characteristics and derive adverse treatment are prohibited. - **Biometric categorisation:** AI that categorises individuals based on biometric data by sensitive attributes (political opinion, ethnic origin, religion) is prohibited. - **Exploitation of vulnerabilities:** AI that systematically exploits the weaknesses of specific groups — such as financial hardship, age, or disability — to manipulate behaviour to their detriment is prohibited. Violations of Article 5 prohibitions are the most severe sanction category: up to **EUR 35 million or 7% of global annual turnover**. ## Obligations for High-Risk Insurance AI Insurers using or developing high-risk AI systems must meet the following requirements: - **Quality management system (Art. 9):** Risk identification, evaluation procedures, corrective actions, and lifecycle monitoring for each high-risk system. - **Data quality and bias testing (Art. 10):** Training data must be representative, accurate, and tested for discrimination potential — especially relevant for underwriting models using demographic data. - **Technical documentation (Art. 11):** Complete description of system properties, performance metrics, training procedures, and limitations. - **Transparency to deployers (Art. 13):** Deployers must receive sufficient information to use the system appropriately. - **Human oversight (Art. 14):** Adequate intervention capabilities for humans, particularly for consequential decisions on claims or insurability. - **Conformity assessment and registration (Art. 43, 71):** Before deployment, a conformity assessment must be completed and the system registered in the EU AI database. The intersection with GDPR matters: underwriting AI processing personal data must comply with both the AI Act and GDPR. Highly automated individual decisions are additionally subject to Article 22 GDPR. ## EU AI Act Compliance Checklist for Insurers 1. **Create an AI system inventory** — map all AI touching customer decisions on policies, premiums, or claims, including third-party systems 2. **Document risk classification** — clearly distinguish high-risk from lower-risk systems under Annex III 3. **Rule out prohibited practices** — confirm no deployed system falls under Article 5 prohibitions 4. **Implement a quality management system** — per Article 9 EU AI Act for all high-risk systems 5. **Test data quality and bias** — evaluate training data for representativeness and discrimination potential 6. **Create technical documentation** — per Article 11 EU AI Act for all high-risk systems 7. **Establish human oversight** — document and test intervention capabilities for automated decisions 8. **Clarify GDPR overlap** — especially for underwriting AI with personal data and Article 22 GDPR implications 9. **Plan BaFin integration** — align AI Act obligations with VAG, MaGo, and Solvency II requirements 10. **Complete conformity assessment and register** — enter high-risk systems in the EU AI database by August 2026 ## Timeline for German Insurers | Date | Requirement | | ------------- | -------------------------------------------- | | February 2025 | Prohibited AI practices (Art. 5) in force | | August 2025 | GPAI model obligations (Chapter V) in force | | August 2026 | Full high-risk requirements for new systems | | August 2026 | Existing high-risk systems must be compliant | Systems deployed after August 2026 must be compliant from day one. A structured overview of all deadlines is in our [EU AI Act compliance guide](https://compound.law/en-DE/ai-act/). ## How Compound Law Helps - AI system inventory and classification under EU AI Act and Annex III - Underwriting compliance frameworks aligned with AI Act and BaFin requirements - Claims AI policy review and decision architecture - Insurtech-specific AI Act advice including GDPR overlap - Technical documentation, bias testing, and quality management systems - BaFin integration strategy and registration support [Book an initial consultation](https://compound.law/en-DE/#booking) ## Frequently Asked Questions **Is insurance AI high-risk under the EU AI Act?** Yes. The EU AI Act explicitly classifies AI used in underwriting, premium calculation, risk scoring, and claims decisions for natural persons as high-risk under Annex III, point 5(b). This applies to insurtechs and traditional insurers alike. **Which insurance AI use cases are high-risk?** High-risk: automated underwriting, dynamic pricing, risk scoring, eligibility determination, and AI that denies claims or sets payout amounts. Lower risk: fraud flagging for human review, internal solvency models, and process automation without decision authority. **When must German insurers comply with the EU AI Act?** Prohibitions on banned AI practices applied from February 2025. Full high-risk requirements apply from August 2026 — for both new systems and existing systems that must be updated. **What obligations apply to high-risk insurance AI?** Quality management system (Art. 9), data quality and bias controls (Art. 10), technical documentation (Art. 11), transparency (Art. 13), human oversight (Art. 14), and EU AI database registration (Art. 71). **Does the EU AI Act apply to insurtechs?** Yes. Insurtechs face the same high-risk obligations as traditional insurers — regardless of size or licence type. **What are prohibited AI practices for insurers?** Prohibited since February 2025: social scoring, biometric categorisation by sensitive characteristics, and exploitation of group vulnerabilities. Fines up to EUR 35 million or 7% of global turnover. ## Related Industry Guides [![EU AI Act timeline Germany for 2 August 2026 2 December 2027 and 2 August 2028](https://compound.law/assets/images/ai-act/ai_act_1.webp)](https://compound.law/en-DE/ai-act/august-2026-deadline/) [ai-act](https://compound.law/en-DE/ai-act/august-2026-deadline/) ### [EU AI Act Timeline Germany: 2 August 2026, 2027 and 2028](https://compound.law/en-DE/ai-act/august-2026-deadline/) [EU AI Act 2 August 2026 is not the only date. German businesses need the split timeline for transparency, stand-alone high-risk AI, and product AI.](https://compound.law/en-DE/ai-act/august-2026-deadline/) [![AI telecoms regulation Germany: EU AI Act, GDPR and TKG 2021 compliance guide](https://compound.law/assets/images/ai-act/ai_act_2.webp)](https://compound.law/en-DE/ai-act/telecommunications/) [ai-act](https://compound.law/en-DE/ai-act/telecommunications/) ### [AI Regulation for Telecoms in Germany: EU AI Act, GDPR & TKG 2021](https://compound.law/en-DE/ai-act/telecommunications/) [German telecom operators face AI obligations under the EU AI Act, GDPR, and TKG 2021. What applies, what's high-risk, and when you must comply.](https://compound.law/en-DE/ai-act/telecommunications/) [![EU AI Act recruitment AI compliance Germany — high-risk Annex III](https://compound.law/assets/images/ai-act/ai_act_2.webp)](https://compound.law/en-DE/ai-act/recruitment/) [ai-act](https://compound.law/en-DE/ai-act/recruitment/) ### [EU AI Act and Recruitment AI in Germany: Compliance Guide](https://compound.law/en-DE/ai-act/recruitment/) [AI recruitment tools in Germany are high-risk under EU AI Act Annex III. What employers need to comply before the August 2026 deadline.](https://compound.law/en-DE/ai-act/recruitment/) ## Frequently asked questions Yes. The EU AI Act explicitly classifies AI used in insurance underwriting, premium calculation, risk scoring, and claims decisions for natural persons as high-risk under Annex III, point 5(b) of Regulation (EU) 2024/1689. High-risk: automated underwriting, dynamic pricing, risk scoring, eligibility determination, and AI that denies claims or determines payout amounts. Lower risk: fraud flagging for human review, internal solvency models, and process automation without decision authority. Prohibitions on banned AI practices applied from February 2025. Full high-risk requirements — quality management system, bias testing, documentation, human oversight — apply from August 2026. High-risk insurance AI requires: a quality management system (Art. 9), data quality and bias controls (Art. 10), technical documentation (Art. 11), transparency to deployers (Art. 13), human oversight (Art. 14), and registration in the EU AI database (Art. 71). Yes. Insurtechs using AI for underwriting or claims processing face the same high-risk obligations as traditional insurers — regardless of company size, licence type, or whether the AI system is built in-house or sourced from a third party. Prohibited since February 2025: social scoring of natural persons, biometric categorisation based on sensitive characteristics, and AI that exploits the vulnerabilities of specific groups. Violations carry fines of up to EUR 35 million or 7% of global turnover. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "EU AI Act for German Insurers: High-Risk AI Compliance Guide (2026)", "description": "EU AI Act classifies insurance AI as high-risk. Underwriting, pricing, and claims obligations for German insurers — with a practical compliance checklist.", "image": "https://compound.law/assets/images/ai-act/ai_act_4.webp", "datePublished": "2026-04-26T00:00:00.000Z", "dateModified": "2026-04-26T00:00:00.000Z", "author": { "@type": "Person", "name": "Dr. Markus Dreißigacker", "image": "https://compound.law/assets/images/team/markusdreissigacker.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/ai-act/insurance/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "AI Act by Industry", "item": "https://compound.law/en-DE/ai-act/" }, { "@type": "ListItem", "position": 3, "name": "EU AI Act for German Insurers: High-Risk AI Compliance Guide", "item": "https://compound.law/en-DE/ai-act/insurance/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Is insurance AI high-risk under the EU AI Act?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. The EU AI Act explicitly classifies AI used in insurance underwriting, premium calculation, risk scoring, and claims decisions for natural persons as high-risk under Annex III, point 5(b) of Regulation (EU) 2024/1689." } }, { "@type": "Question", "name": "Which insurance AI use cases are high-risk under the EU AI Act?", "acceptedAnswer": { "@type": "Answer", "text": "High-risk: automated underwriting, dynamic pricing, risk scoring, eligibility determination, and AI that denies claims or determines payout amounts. Lower risk: fraud flagging for human review, internal solvency models, and process automation without decision authority." } }, { "@type": "Question", "name": "When must German insurers comply with the EU AI Act?", "acceptedAnswer": { "@type": "Answer", "text": "Prohibitions on banned AI practices applied from February 2025. Full high-risk requirements — quality management system, bias testing, documentation, human oversight — apply from August 2026." } }, { "@type": "Question", "name": "What obligations apply to high-risk insurance AI?", "acceptedAnswer": { "@type": "Answer", "text": "High-risk insurance AI requires: a quality management system (Art. 9), data quality and bias controls (Art. 10), technical documentation (Art. 11), transparency to deployers (Art. 13), human oversight (Art. 14), and registration in the EU AI database (Art. 71)." } }, { "@type": "Question", "name": "Does the EU AI Act apply to insurtechs?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Insurtechs using AI for underwriting or claims processing face the same high-risk obligations as traditional insurers — regardless of company size, licence type, or whether the AI system is built in-house or sourced from a third party." } }, { "@type": "Question", "name": "What are prohibited AI practices for insurers?", "acceptedAnswer": { "@type": "Answer", "text": "Prohibited since February 2025: social scoring of natural persons, biometric categorisation based on sensitive characteristics, and AI that exploits the vulnerabilities of specific groups. Violations carry fines of up to EUR 35 million or 7% of global turnover." } } ] } ] ```