New York · Assembly Bill · 2025-2026 Regular Sessions
AB8556
New York Assembly Bill 8556 — An Act to amend the public health law and the insurance law, in relation to the use of an artificial intelligence, algorithm, or other software tool for the purpose of utilization review

Status ● Introduced Effective N/A Passage Likelihood L

WHAT THIS BILL REGULATES · 3 REQUIREMENT TYPES

How Is This Bill Enforced

Enforcement Authority
Enforcement by the New York Department of Health (for public health law provisions) and the New York Department of Financial Services (for insurance law provisions) through existing regulatory authority over utilization review agents and disability insurers. AI tools used in utilization review must be open to inspection for audit or compliance reviews by the applicable department. No private right of action is created by the bill.
Private Right of Action
No private right of action. Enforcement is exclusive to the designated authority.
Penalties
The bill does not specify monetary penalties, damages, or remedies. Enforcement would occur through existing regulatory authority of the Department of Health and the Department of Financial Services over utilization review agents and insurers, respectively.

What This Bill Requires

Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.

Statutory Text
Analysis & Obligations
Pub. Health Law § 4905-a(1)(a)–(c)
Individualized clinical data requirements for AI utilization review (Public Health Law)
Deployer

(1)(a)(i)–(iii) 1 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) bases its determination on the following information, as applicable: (i) an enrollee's medical or other clinical history; (ii) individual clinical circumstances as presented by the requesting provider; and (iii) other relevant clinical information contained in the enrollee's medical or other clinical record.

(1)(b) 1 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not base its determination solely on a group dataset.

Subdivision 1(a)–(c) of the new Public Health Law § 4905-a requires utilization review agents to ensure that any AI, algorithm, or software tool used in utilization review bases its determinations on the individual enrollee's medical history, clinical circumstances as presented by the requesting provider, and other relevant clinical record information. The tool may not base its determination solely on a group dataset. These provisions collectively enforce individualized decision-making and prohibit the use of aggregate data as the sole basis for clinical determinations.

Compliance actions 1 item
1
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must ensure that any AI, algorithm, or other software tool used in utilization review bases its determination on the individual enrollee's medical or clinical history, the individual clinical circumstances as presented by the requesting provider, and other relevant clinical information contained in the enrollee's medical or clinical record. The tool must not base its determination solely on a group dataset.
HC-01.3
Pub. Health Law § 4905-a(1)(c)–(f)
Legal compliance, non-discrimination, and equitable application (Public Health Law)
Deployer

(1)(c) The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1)'s criteria and guidelines complies with this article, including, but not limited to any other applicable state and federal law.

(1)(d) 2 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not supplant health care provider decision-making.

(1)(e) 3 The use of the artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not discriminate, directly or indirectly, against enrollees in violation of state or federal law.

(1)(f) 3 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) is fairly and equitably applied, including in accordance with any applicable regulations and guidance issued by the federal department of health and human services.

Subdivisions (1)(c) through (1)(f) impose compliance, non-discrimination, and equitable application requirements on AI tools used by utilization review agents. The tool's criteria must comply with Article 49 of the Public Health Law and all applicable state and federal law. The tool must not discriminate directly or indirectly, must be fairly and equitably applied in accordance with federal HHS regulations and guidance, and must not supplant health care provider decision-making.

Compliance actions 2 items
2
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review do not supplant health care provider decision-making. The tool may inform but not replace the clinical judgment of health care professionals.
HC-01.1
3
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review do not discriminate, directly or indirectly, against enrollees in violation of state or federal law, and are fairly and equitably applied in accordance with applicable federal HHS regulations and guidance.
H-02
Pub. Health Law § 4905-a(1)(g)–(h)
Regulatory inspection and policy disclosure (Public Health Law)
Deployer

(1)(g) 4 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) is open to inspection for audit or compliance reviews by the department.

(1)(h) 5 Disclosures pertaining to the use and oversight of the artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) are contained in the written policies and procedures, as required by section forty-nine hundred two of this title.

Subdivisions (1)(g) and (1)(h) address regulatory transparency. The AI tool must be open to inspection for audit or compliance reviews by the Department of Health. Additionally, disclosures pertaining to the use and oversight of the AI tool must be contained in the utilization review agent's written policies and procedures as required by Public Health Law § 4902.

Compliance actions 2 items
4
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review are open to inspection for audit or compliance reviews by the Department of Health.
HC-01.7
5
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must include disclosures pertaining to the use and oversight of AI, algorithms, or other software tools in their written policies and procedures as required by Public Health Law § 4902.
HC-01.7
Pub. Health Law § 4905-a(1)(i)–(k)
Periodic review, data use limitation, and harm prohibition (Public Health Law)
Deployer

(1)(i) 6 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1)'s performance, use, and outcomes are periodically reviewed and revised to maximize accuracy and reliability.

(1)(j) 7 Patient data is not used beyond its intended and stated purpose, consistent with this section and the federal Health Insurance Portability and Accountability Act of 1996 (Public Law 104-191), as applicable.

(1)(k) 8 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not directly or indirectly cause harm to the enrollee.

Subdivisions (1)(i) through (1)(k) impose ongoing operational requirements. The AI tool's performance, use, and outcomes must be periodically reviewed and revised to maximize accuracy and reliability. Patient data may not be used beyond its intended and stated purpose consistent with HIPAA. The tool must not directly or indirectly cause harm to the enrollee.

Compliance actions 3 items
6
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must periodically review and revise the performance, use, and outcomes of AI, algorithms, or other software tools used in utilization review to maximize accuracy and reliability.
HC-01.4
7
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must ensure that patient data used by AI, algorithms, or other software tools in utilization review is not used beyond its intended and stated purpose, consistent with HIPAA and applicable provisions of this section.
HC-01.5
8
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review do not directly or indirectly cause harm to the enrollee.
S-01
Pub. Health Law § 4905-a(2)
Prohibition on AI-based medical necessity determinations (Public Health Law)
Deployer

(2) 9 Notwithstanding subdivision one of this section, the artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) shall not deny, delay, or modify health care services based, in whole or in part, on medical necessity. A determination of medical necessity shall be made only by a licensed physician or a licensed health care professional competent to evaluate the specific clinical issues involved in the health care services requested by the provider, as provided in this title, by reviewing and considering the requesting provider's recommendation, the enrollee's medical or other clinical history, as applicable, and individual clinical circumstances.

Subdivision 2 establishes the bill's core prohibition: AI, algorithms, or software tools may not deny, delay, or modify health care services based on medical necessity. Medical necessity determinations must be made only by a licensed physician or licensed health care professional competent to evaluate the specific clinical issues, who must review the requesting provider's recommendation, the enrollee's clinical history, and individual clinical circumstances. This subdivision operates notwithstanding the requirements of subdivision 1.

Compliance actions 1 item
9
Utilization review agentsUtilization review agentA utilization review agent that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1) must ensure that AI, algorithms, or other software tools do not deny, delay, or modify health care services based on medical necessity. Medical necessity determinations must be made only by a licensed physician or licensed health care professional competent to evaluate the specific clinical issues involved, who must review and consider the requesting provider's recommendation, the enrollee's medical or clinical history, and the enrollee's individual clinical circumstances.
HC-01.1
Pub. Health Law § 4905-a(3)–(7)
Definitions, scope, federal compliance, and administrative provisions (Public Health Law)

(3) For purposes of this section, "artificial intelligenceArtificial intelligence"artificial intelligence" means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.Pub. Health Law § 4905-a(3); Ins. Law § 4905-a(3)" means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.

(4) This section shall apply to utilization reviews that prospectively, retrospectively, or concurrently review requests for covered health care services.

(5) A health care service plan subject to this section shall comply with applicable federal rules and guidance issued by the federal department of health and human services regarding the use of artificial intelligence, algorithm, or other software toolsArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1). The department may issue guidance to implement this section within one year of the adoption of federal rules or the issuance of guidance by the federal department of health and human services regarding the use of artificial intelligence, algorithm, or other software toolsArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1). Such guidance shall not be subject to the state administrative procedure act.

(6) For purposes of implementing this section, the department may enter into exclusive or nonexclusive contracts, or amend existing contracts, on a bid or negotiated basis. Contracts entered into or amended pursuant to this subdivision shall be exempt from articles nine and eleven of the state finance law, and shall not be subject to review or approval of any other state agency or entity.

(7) This section applies only to the extent that the department obtains any necessary federal approvals, and federal financial participation is not otherwise jeopardized.

Subdivisions 3 through 7 contain the definition of artificial intelligence, the scope of covered utilization reviews (prospective, retrospective, and concurrent), a federal compliance mandate, authority for the Department to issue guidance and enter contracts, and a federal financial participation savings clause. These provisions are structural and administrative — they do not impose new affirmative compliance obligations beyond the substantive requirements of subdivisions 1 and 2.

Ins. Law § 4905-a(1)(a)–(c)
Individualized clinical data requirements for AI utilization review (Insurance Law)
Deployer

(1)(a)(i)–(iii) 10 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) bases its determination on the following information, as applicable: (i) An insured's medical or other clinical history; (ii) Individual clinical circumstances as presented by the requesting provider; and (iii) Other relevant clinical information contained in the insured's medical or other clinical record.

(1)(b) 10 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not base its determination solely on a group dataset.

Subdivision 1(a)–(c) of the new Insurance Law § 4905-a mirrors the Public Health Law counterpart, requiring disability insurers (including specialized health insurers) to ensure that AI tools used in utilization review or utilization management base determinations on the individual insured's medical history, clinical circumstances as presented by the requesting provider, and other relevant clinical record information. The tool may not base its determination solely on a group dataset.

Compliance actions 1 item
10
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must ensure that any AI, algorithm, or other software tool used in utilization review or utilization management bases its determination on the individual insured's medical or clinical history, the individual clinical circumstances as presented by the requesting provider, and other relevant clinical information contained in the insured's medical or clinical record. The tool must not base its determination solely on a group dataset.
HC-01.3
Ins. Law § 4905-a(1)(c)–(f)
Legal compliance, non-discrimination, and equitable application (Insurance Law)
Deployer

(1)(c) The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1)'s criteria and guidelines complies with this chapter and applicable state and federal law.

(1)(d) 11 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not supplant health care provider decision-making.

(1)(e) 12 The use of the artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not discriminate, directly or indirectly, against insureds in violation of state or federal law.

(1)(f) 12 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) is fairly and equitably applied, including in accordance with any applicable regulations and guidance issued by the federal department of health and human services.

Subdivisions (1)(c) through (1)(f) of the Insurance Law parallel impose compliance, non-discrimination, and equitable application requirements on AI tools used by disability insurers. The tool's criteria must comply with the Insurance Law and applicable state and federal law, must not discriminate directly or indirectly, must be fairly and equitably applied per federal HHS guidance, and must not supplant health care provider decision-making.

Compliance actions 2 items
11
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review or utilization management do not supplant health care provider decision-making.
HC-01.1
12
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review or utilization management do not discriminate, directly or indirectly, against insureds in violation of state or federal law, and are fairly and equitably applied in accordance with applicable federal HHS regulations and guidance.
H-02
Ins. Law § 4905-a(1)(g)–(h)
Regulatory inspection and policy disclosure (Insurance Law)
Deployer

(1)(g) 13 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) is open to inspection for audit or compliance reviews by the department pursuant to applicable state and federal law.

(1)(h) 14 Disclosures pertaining to the use and oversight of the artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) are contained in the written policies and procedures, as required by section forty-nine hundred two of this title.

Subdivisions (1)(g) and (1)(h) of the Insurance Law parallel require disability insurers to make AI tools open to inspection for audit or compliance reviews by the Department of Financial Services pursuant to applicable law, and to include disclosures pertaining to AI use and oversight in written policies and procedures as required by Insurance Law § 4902.

Compliance actions 2 items
13
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review or utilization management are open to inspection for audit or compliance reviews by the Department of Financial Services pursuant to applicable state and federal law.
HC-01.7
14
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must include disclosures pertaining to the use and oversight of AI, algorithms, or other software tools in their written policies and procedures as required by Insurance Law § 4902.
HC-01.7
Ins. Law § 4905-a(1)(i)–(k)
Periodic review, data use limitation, and harm prohibition (Insurance Law)
Deployer

(1)(i) 15 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1)'s performance, use, and outcomes are periodically reviewed and revised to maximize accuracy and reliability.

(1)(j) 16 Patient data is not used beyond its intended and stated purpose, consistent with state law and the federal Health Insurance Portability and Accountability Act of 1996 (Public Law 104-191), as applicable.

(1)(k) 17 The artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) does not directly or indirectly cause harm to the insured.

Subdivisions (1)(i) through (1)(k) of the Insurance Law parallel impose ongoing operational requirements on disability insurers: periodic review and revision of AI tool performance to maximize accuracy and reliability, restriction of patient data use to intended and stated purposes consistent with state law and HIPAA, and a prohibition against direct or indirect harm to the insured.

Compliance actions 3 items
15
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must periodically review and revise the performance, use, and outcomes of AI, algorithms, or other software tools used in utilization review or utilization management to maximize accuracy and reliability.
HC-01.4
16
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must ensure that patient data used by AI, algorithms, or other software tools in utilization review or utilization management is not used beyond its intended and stated purpose, consistent with state law and HIPAA.
HC-01.5
17
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must ensure that AI, algorithms, or other software tools used in utilization review or utilization management do not directly or indirectly cause harm to the insured.
S-01
Ins. Law § 4905-a(2)
Prohibition on AI-based medical necessity determinations (Insurance Law)
Deployer

(2) 18 Notwithstanding subsection one of this section, the artificial intelligence, algorithm, or other software toolArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1) shall not deny, delay, or modify health care services based, in whole or in part, on medical necessity. A determination of medical necessity shall be made only by a licensed physician or licensed health care professional competent to evaluate the specific clinical issues involved in the health care services requested by the provider, as provided in this title, by reviewing and considering the requesting provider's recommendation, the insured's medical or other clinical history, as applicable, and individual clinical circumstances.

Subdivision 2 of the Insurance Law parallel establishes the same core prohibition: AI, algorithms, or software tools may not deny, delay, or modify health care services based on medical necessity. Medical necessity determinations must be made only by a licensed physician or licensed health care professional competent to evaluate the specific clinical issues, who must review the requesting provider's recommendation, the insured's clinical history, and individual clinical circumstances.

Compliance actions 1 item
18
Disability insurersDisability insurerA disability insurer, including a specialized health insurer that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity, or that contracts with or otherwise works through an entity that uses an artificial intelligence, algorithm, or other software tool for the purpose of utilization review or utilization management functions, based in whole or in part on medical necessity.Ins. Law § 4905-a(1) must ensure that AI, algorithms, or other software tools do not deny, delay, or modify health care services based on medical necessity. Medical necessity determinations must be made only by a licensed physician or licensed health care professional competent to evaluate the specific clinical issues involved, who must review and consider the requesting provider's recommendation, the insured's medical or clinical history, and the insured's individual clinical circumstances.
HC-01.1
Ins. Law § 4905-a(3)–(6)
Definitions, scope, federal compliance, and administrative provisions (Insurance Law)

(3) For purposes of this section, "artificial intelligenceArtificial intelligence"artificial intelligence" means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.Pub. Health Law § 4905-a(3); Ins. Law § 4905-a(3)" means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments.

(4) This section shall apply to utilization review or utilization management functions that prospectively, retrospectively, or concurrently review requests for covered health care services.

(5) An insurer subject to this section shall comply with applicable federal rules and guidance issued by the federal department of health and human services regarding the use of artificial intelligence, algorithm, or other software toolsArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1). The department may issue guidance to implement this paragraph within one year of the adoption of federal rules or the issuance of guidance by the federal department of health and human services regarding the use of artificial intelligence, algorithm, or other software toolsArtificial intelligence, algorithm, or other software toolAn artificial intelligence, algorithm, or other software tool used for the purpose of utilization review, based in whole or in part on medical necessity.Pub. Health Law § 4905-a(1); Ins. Law § 4905-a(1). Such guidance shall not be subject to the state administrative procedure act.

(6) For purposes of implementing this section, the department may enter into exclusive or nonexclusive contracts, or amend existing contracts, on a bid or negotiated basis. Contracts entered into or amended pursuant to this subdivision shall be exempt from articles nine and eleven of the state finance law, and shall not be subject to review or approval of any other state agency or entity.

Subdivisions 3 through 6 of the Insurance Law parallel contain the definition of artificial intelligence, the scope of covered utilization reviews and utilization management functions (prospective, retrospective, and concurrent), a federal compliance mandate, and authority for the Department to issue guidance and enter contracts. These are structural and administrative provisions that do not impose new affirmative compliance obligations.

§ 3
Effective date

This act shall take effect on the ninetieth day after it shall have become a law.

Section 3 provides that the act takes effect on the ninetieth day after it becomes law. No specific effective date is computable until the bill is signed.

Passage Likelihood

Low
Status Introduced
Chamber No passage
Committee No action
Majority party Yes
Bipartisan No
Prior session None

Legislative History

2025-05-20 referred to insurance
2026-01-07 referred to insurance

Entry Last Reviewed

2026-05-20
AI generated