Regulation

The Australian Prudential Regulation Authority's finalised amendments to Prudential Standard CPS 230 Operational Risk Management take effect on July 1, 2026, introducing limited contractual exemptions for non-traditional service providers such as central banks and clearing facilities. Insurers, banks, and superannuation funds are racing to update their Material Service Provider registers and reporting processes before the deadline.

Australia's Prudential Regulation Authority (APRA) is in the final countdown to the July 1, 2026 commencement of its amended CPS 230 Operational Risk Management standard. Insurers, banks, and superannuation trustees must update their Material Service Provider registers and reporting processes to reflect new limited exemptions for non-traditional service providers such as central banks and clearing facilities before the deadline.

The Insurance Regulatory and Development Authority of India (IRDAI) proposed a new framework on June 17, 2026, mandating public consultation, periodic three-year reviews, and greater transparency in framing insurance regulations under the Sabka Bima Sabki Raksha (Amendment of Insurance Laws) Act, 2025. The draft codifies stakeholder engagement practices and requires cost-benefit assessment of proposed rules, with comments invited until July 8, 2026.

Australian insurers, banks, and superannuation funds are in the final stretch of preparations ahead of the July 1, 2026, commencement of APRA's amended CPS 230 Operational Risk Management standard. The finalized amendments, released April 30, introduce limited contractual exemptions for non-traditional service providers such as central banks and clearing facilities, while requiring all regulated entities to update their Material Service Provider registers before the deadline.

UAE insurers, banks, and fintech firms face a September 16, 2026, deadline to align with the country's landmark consolidated Central Bank Law (Federal Decree-Law No. 6 of 2025), which came into force in September 2025. The overhaul consolidates banking and insurance regulation under the CBUAE, widens the regulatory perimeter to capture insurtech and digital platforms, and raises the maximum administrative fine fivefold to AED 1 billion.

The Insurance Regulatory and Development Authority of India (IRDAI) has proposed a broad set of amendments to regulations governing insurer registration, capital structure, share transfers, and amalgamations, aimed at improving ease of doing business. The proposals — open for stakeholder comments until July 6, 2026 — include clarified approval thresholds for shareholding increases, streamlined merger frameworks, and reduced transaction fees, following India's recent move to allow 100% foreign investment in the sector.

The UK's Financial Conduct Authority is expanding its scrutiny of the home and travel insurance markets in 2026 in response to a super-complaint lodged by consumer group Which?. While the FCA rejected calls for a joint legal review of consumer protection frameworks, it committed to reviewing claims handling, oversight of third-party claims handlers, and how products are sold across insurers, brokers, and price comparison websites.

The European Central Bank warned in its May 2026 Financial Stability Review that European insurers and pension funds would be hit harder than banks by a severe private credit market shock. In an illustrative stress exercise, the ECB found that insurers faced the largest absolute impact — around 4% of assets — because their private credit exposures are larger, less senior, and more exposed to broader market repricing. Pension funds would suffer 5-6% asset losses, while bank losses would stay contained at no more than 1.3% of equity.

India's insurance regulator IRDAI is rolling out a wave of structural reforms aimed at modernising the country's $146 billion insurance sector. The flagship initiative is Bima Sugam — a non-profit, industry-owned digital marketplace functioning as the 'UPI of insurance' where customers can compare, buy, and manage policies, with the first commercial use case targeted for 2026. IRDAI is also moving to a dynamic Risk-Based Capital framework to replace the formula-based regime, mandating Indian Accounting Standards adoption, and overhauling commissions to curb mis-selling.

The Insurance Regulatory and Development Authority of India has amended its Corporate Governance for Insurers Regulations to tie the variable pay and incentives of CEOs and other key management persons directly to customer-centric outcomes. Under a circular that takes effect immediately, performance parameters now include claim responsiveness, timely grievance redressal, product performance, financial soundness, and the removal of dark patterns from insurer and distributor websites. The move, which industry executives describe as a tightening of an already stringent framework, shifts executive accountability beyond financial growth toward measurable policyholder welfare.

The Regional Court of Munich issued a temporary injunction holding Google directly liable for false claims generated by its AI Overviews, ruling that AI-generated summaries are Google's own content rather than protected search results. The decision (Case 26 O 869/26) rejected Google's argument that users could check sources themselves and that disclaimers shield liability. Legal and insurance analysts say the principle is a direct warning to insurers that have embedded generative AI into chatbots, claims summaries, and underwriting tools: you own the output, and disclaimers will not protect you.

The National Association of Insurance Commissioners is intensifying scrutiny of the credit ratings on complex private-credit and infrastructure securities — including debt funding the AI data center buildout — held by US insurers. Since January 1, 2026, the NAIC's 'discretion amendment' has empowered regulators to challenge and override ratings that differ from their own analysis by more than three notches. With privately placed bonds now representing 23.4% of insurers' admitted bonds, up from 18.3% in 2021, the regulator is questioning whether the ratings underpinning these attractive assets are robust enough to survive closer examination.

US state insurance regulators, through the NAIC, have launched a review of the credit ratings underpinning data center and private-credit investments held by insurers — a fast-growing slice of insurer balance sheets fueled by the AI infrastructure boom. Since January 1, 2026, the NAIC has held the power to challenge and override third-party credit ratings that differ from its own analysis by more than three notches. With privately rated bonds now representing 23.4% of insurers' total admitted bonds, the scrutiny strikes at the heart of the private-assets surge.

The UK Financial Conduct Authority (FCA) published its final findings from its landmark Premium Finance Market Study in February 2026, confirming that the average annual percentage rate (APR) on insurance premium finance has fallen by 4.1% since 2022, driven by Consumer Duty supervisory pressure. The regulator stopped short of imposing a sector-wide APR cap but committed to continued targeted enforcement and monitoring, maintaining pressure on firms that are not delivering fair value.

The Australian Prudential Regulation Authority (APRA) has finalised targeted amendments to Prudential Standard CPS 230 Operational Risk Management, effective July 1, 2026. The changes introduce limited contractual exemptions for certain non-traditional service providers — such as central banks and clearing facilities — responding to industry concerns while preserving the core objectives of the landmark operational resilience framework for insurers, banks, and superannuation funds.