Short answer
Insurers in Brazil must comply with SUSEP’s AI guardrails, which require human oversight, transparency in automated decisions, and documented risk assessments for AI systems used in underwriting, pricing, or claims. These requirements are embedded in SUSEP Circular No. 693/2024 and reinforced by Resolution No. 105/2023 on digital transformation governance.
TL;DR
- SUSEP is the sole federal regulatory authority for private insurance, open pension, and capitalization entities in Brazil (Law No. 9,656/1998, Art. 4).
- Circular No. 693/2024 (effective 1 Oct 2024) mandates AI impact assessments and explainability for high-risk insurance processes.
- Insurers must retain full audit logs of AI-driven decisions for at least 5 years (SUSEP Resolution No. 105/2023, Art. 12).
- Human-in-the-loop validation is required for all automated underwriting decisions affecting coverage denial or premium increases >15%.
- Non-compliance may trigger fines up to 5% of annual gross revenue from regulated activities (SUSEP Normative Instruction No. 77/2022, §2).
- SUSEP’s AI supervision framework aligns with the OECD AI Principles and Brazil’s National AI Strategy (Decree No. 11,762/2023), not the EU AI Act.
Quais são os guardrails obrigatórios para seguradoras no Brasil?
SUSEP requires insurers to implement four core AI guardrails: (1) pre-deployment risk classification (low/medium/high) per use case; (2) documented model validation reports covering fairness, robustness, and data lineage; (3) real-time monitoring for statistical drift and decision bias; and (4) mandatory human review for adverse outcomes—including policy cancellation, claim rejection, or surcharges exceeding thresholds defined in internal risk policies. These apply equally to proprietary models and third-party AI tools integrated into core systems.
Como a SUSEP define “alto risco” em IA para o setor segurador?
High-risk AI systems are those that significantly affect legal rights, financial exposure, or access to essential services—specifically: automated underwriting engines scoring creditworthiness or health risk; dynamic pricing algorithms adjusting premiums in real time; and claims adjudication models denying or reducing payouts without manual intervention. SUSEP Circular No. 693/2024 Annex I lists 12 such high-risk functions, all requiring independent third-party auditing every 12 months.
Quem é responsável pela conformidade com os guardrails de IA?
Ultimate accountability rests with the insurer’s Board of Directors and Executive Committee (SUSEP Resolution No. 105/2023, Art. 5). A designated AI Governance Officer—appointed at C-suite level and registered with SUSEP—is mandated for firms with >R$500M in annual premium income. This role oversees documentation, staff training, and incident reporting within 72 hours of any AI-related material error.
FAQ
- Q: Does SUSEP require insurers to disclose AI use to policyholders?
- A: Yes—per Circular No. 693/2024, Art. 8, insurers must inform customers in plain language when AI materially influences decisions (e.g., via policy terms appendix or digital onboarding flow), including how to request human review.
- Q: Are open-source LLMs exempt from SUSEP guardrails?
- A: No—any model deployed operationally in regulated processes falls under scope, regardless of origin. Fine-tuned or RAG-augmented LLMs used for claims triage or fraud detection require full compliance.
- Q: Can insurers rely solely on vendor certifications for AI compliance?
- A: No—SUSEP requires internal validation. Vendor attestations supplement but do not replace insurer-owned testing, bias audits, and SUSEP-mandated documentation (Circular No. 693/2024, §4.2).
- Q: Is there a grace period for legacy AI systems?
- A: Yes—systems operational before 1 Oct 2024 must achieve full compliance by 30 Sept 2025 (Circular No. 693/2024, Art. 15).
Key facts
- SUSEP regulates ~2,100 licensed insurers and reinsurers in Brazil (SUSEP Annual Report 2023, p. 11).
- Circular No. 693/2024 is the first binding AI regulation issued by a Brazilian financial sector regulator.
- SUSEP’s AI supervision unit was formally established in March 2024 under Resolution No. 107/2024.
- All AI governance documentation must be written in Portuguese and stored in Brazil (SUSEP Normative Instruction No. 77/2022, Art. 3).
Sources
- Lei nº 9.656/1998 — Planalto.gov.br
- SUSEP Circular nº 693/2024 — susep.gov.br/circular-693-2024
- SUSEP Resolução nº 105/2023 — susep.gov.br/resolucao-105-2023
- Decreto nº 11.762/2023 (Estratégia Nacional de IA) — Planalto.gov.br
- IBM Granite documentation on regulated AI deployment — ibm.com/docs/en/granite
Saiba mais em https://g.cloud