National Association of Insurance Commissioners

Profile narrative

The National Association of Insurance Commissioners (NAIC) serves as the collective body of state insurance regulators in the United States, working to coordinate oversight of the insurance industry and to develop uniform standards that protect consumers and promote market stability. It produces model laws, regulations, and guidelines that individual states may adopt, thereby reducing regulatory fragmentation across jurisdictions. In addition to standard‑setting, the NAIC provides data collection and analysis services, maintains the Insurance Regulatory Information System, and offers educational resources and training for insurance commissioners and their staff. Through these activities the organization supports both regulators and the insurers they oversee, facilitating consistent consumer protection practices nationwide.

Headquartered in the United States, the NAIC brings together the insurance commissioners of all fifty states, the District of Columbia, and the five major U.S. territories, giving it a nationwide reach that reflects the decentralized nature of American insurance regulation. This broad membership enables the association to act as a central forum where regulators can share expertise, discuss emerging risks, and collaborate on responses to market developments. The NAIC’s role is further distinguished by its status as a non‑profit organization that is neither a government agency nor a private trade group, but rather an instrument created by the states themselves to enhance regulatory effectiveness. Its competencies include actuarial analysis, financial examination techniques, and the development of technology‑focused initiatives such as the NAIC’s Center for Insurance Policy and Research.

A notable event in the NAIC’s recent history occurred on June 11 2026, when attackers exploited a zero‑day vulnerability in the organization’s Oracle PeopleSoft platform, accessing publicly available statutory financial reports, credit‑rating data, and technical logs while confirming that personal, payment, and core regulatory systems remained secure. The breach prompted the NAIC to engage external cybersecurity experts, cooperate with the FBI, temporarily suspend certain online services, and undertake a thorough review of its network defenses. This incident highlighted both the importance of safeguarding regulatory information systems and the NAIC’s commitment to transparency and rapid response when faced with cyber threats.

Incidents

1 incident linked to this organisation.