The Telematics Score Is Tested. The Governance Group Meets Next Quarter.

Colorado's amended Regulation 10-1-1 took effect on October 15, 2025. It extends the state's governance and risk management requirements for external consumer data and information sources (ECDIS), and the algorithms and predictive models that use them, from life insurers to private passenger auto insurers and health benefit plan insurers. For auto insurers, the definition of ECDIS expressly includes "consumer-generated Internet of Things data including telematics data."

The required framework includes senior management accountability, which covers "establishing clear lines of communication and delegated decision-making authority." It also requires a documented cross-functional governance group, an up-to-date inventory with version control, and a documented explanation of "any material change(s) in the inventory," with the rationale for each change.

Auto and health insurers that use ECDIS had to make every component available to the Division of Insurance on July 1, 2026, and they now file an annual report signed by an officer attesting to compliance. It names the title and qualifications of each person responsible for each requirement. An insurer that cannot attest must submit a corrective action plan. In June 2026 the Division reissued a bulletin that waives the quantitative testing description until it adopts testing rules, adding that "All other requirements outlined in Regulation 10-1-1 remain in effect."

Hypothetical: an auto insurer's pricing team wants to add a vendor's telematics driving score to its Colorado rating plan. The data science team has documented the score's purpose and outputs, run its internal testing and drafted the inventory entry. Legal has reviewed the vendor contract.

Adding the score is a material change to the inventory. The insurer's written process sends it to the cross-functional governance group, whose next meeting is eleven weeks out. No one has written authority to approve a change between meetings.

The file is ready. The person who can release it is not.

The rate filing slips a quarter, and the rating plan stays on older variables. When the change finally goes through, the rationale is rebuilt from an email chain, which is not what an officer wants to attest to next July.

The change arrives as one decision packet: the inventory entry, the vendor review, the testing summary, the process for consumer complaints and adverse decisions, and the plan for monitoring drift.

The senior leader with delegated authority approves it with conditions the same week. The rationale is written into the inventory at the moment of decision, the governance group reviews the approval at its next meeting, and the officer who signs next year's report can show who decided, when and why.

WisdomTwin.ai is building a sovereign judgment layer for regulated enterprises. It is designed to give each named approver a role-specific judgment twin that prepares the decision packet the way that person reviews, with the evidence attached, so the decision moves faster and leaves an auditable record. It is designed to run on-premises, on-device or in your private cloud, and the named person still makes the call.

We don't replace judgment. We remove the wait.

Examples in this issue are hypothetical, and nothing here describes a customer result.

Book a 20-minute call: https://calendly.com/romanbodnarchuk/20min

Roman Bodnarchuk

Co-Founder and CEO, WisdomTwin.ai