Careers

Diversity, Equity & Inclusion

Experience

Innovation

Interactive Maps

Locations

About

Pages

Meet our team of innovators
Ask us how we do it

Professionals

Insights

Services

Thompson Hine LLP, a full-service business law firm with approximately 400 lawyers in 8 offices, was ranked number 1 in the category “Most innovative North American law firms: New working models” by The Financial Times and was 1 of 7 firms shortlisted for The American Lawyer’s inaugural Legal Services Innovation Award. The firm has been recognized by the National Law Journal as a Legal Technology Trailblazer and featured by Bloomberg for its innovative service delivery models, which drive accuracy and predictability. The firm’s commitment to innovation is embodied in Thompson Hine SmartPaTHTM – a smarter way to work – predictable, efficient and aligned with client goals. For more information, please visit ThompsonHine.com and ThompsonHine.com/SmartPaTH.

Home | Thompson Hine LLP

Atlanta

Chicago

Cincinnati

Cleveland

Columbus

Dayton

Los Angeles

New York

Washington, D.C.

core/heading

Historically, albeit not that long a history, regulators have been concerned about how businesses collect and safeguard individual, personal non-public information. Now, that focus has markedly shifted as companies of all sorts welcome next-generation technology and data mining tools into daily business functions. The current intensive spotlight is on consumer-facing commercial enterprises that use consumer data sets and artificial intelligence (AI)- and machine learning (ML)-enabled analytical models to make business decisions. It is now clear that regulators in the United States, European Union and around the globe believe that well-defined guardrails are needed to ensure the ethical use of AI- and ML-powered data and analytics in decision making. As those regulations are enacted, businesses need to conform their operations and functions and comply with those legal guardrails – starting now.

core/paragraph

Colorado’s Division of Insurance initially planted the flag in 2021 (§§10-1-109, C.R.S. and 10-3-1104.9, C.R.S.) and then recently issued draft supporting regulations. The law goes into effect this year and, at this point, regulates life insurers’ use of external personal data and information sources (e.g., electronic chart display and information system (ECDIS)) or employment of algorithms and models that use ECDIS, where the resulting impact of such use is deemed to result in unfair discrimination against consumers on the basis of race, color, national or ethnic origin, religion, sex, sexual orientation, disability, gender identity or gender expression. The draft regulation, that the industry largely views as overbroad, takes the statute one step further by encompassing any data or information source that is used to supplement or supplant traditional underwriting factors, including credit scores, social media habits, purchasing habits, home ownership, educational attainment, licensures, civil judgments, court records, occupations that do not have a direct relationship to mortality, morbidity or longevity risk, and any insurance risk scores derived by the insurer or third party from a similar information source. The regulation may be subject to change, but nonetheless it is indicative of the increased regulatory focus on AI/ML data-based decision making that, no doubt, will migrate to environments beyond insurance, such as credit-scoring and lending and academic admissions criteria, labor and employment decisions, and employee benefits assessments.

California, Connecticut, Louisiana, New York, Rhode Island and Washington, D.C. all have weighed in by adopting similar legal governance guidance and protocols, as has the White House with its <a>“Blueprint for an AI Bill of Rights” </a>released in October 2022, followed by the U.S. Department of Commerce’s National Institute of Standards and Technology’s<a> </a><a>“AI Risk Management Framework</a>” in January 2023. United Kingdom and EU regulators have their own sets of policies and legal frameworks to address potential, perceived AI-driven bias (intentional or not) and to enable transparency of model-driven consumer-related decisions. It is noteworthy that almost all of the state, federal and international legal guardrails not only require companies to comply with a robust set of rules, but also attribute direct responsibility for any failures to boards of directors and senior management. The regulators are coming, and businesses need to step ahead now.

Thus far, there is no standard measurement for bias (intentional or not). Instead, current laws and other requirements often require the company to determine if the AI/ML-driven decision making results in “disproportionate negative outcomes” that have a detrimental impact on a protected group (including race, color, national or ethnic origin, religion, sex, sexual orientation, disability, gender identity, or gender expression). Companies may include some combination of “neutral” factors in making business decisions, as long as they are considered for all other similarly situated individuals. But aggressive regulatory enforcement will follow once the prohibited factors are breached and bias (or perceived bias) results, and it will be vital for companies to have compliant, standard procedures and protocols firmly entrenched throughout the enterprise.

Below are a few suggestions for companies and their data technology teams to address and stay ahead of the evolving AI/ML requirements. The new rules will require more resources.

core/list

Now is the time to create and implement new internal systems to ensure responsible use of data and AI/ML-driven decision making and minimize legal risks for the company, the board and senior management.

https://admin.thompsonhine.com/wp-content/uploads/2023/05/Thompson-Hine-Business-Law-Update-May-2023.pdf

core/file

<em>This article may be reproduced, in whole or in part, with the prior permission of Thompson Hine LLP and acknowledgement of its source and copyright. It is intended to inform clients about legal matters of current interest and is not intended as legal advice. Readers should not act upon the information contained in it without professional counsel. This document may be considered attorney advertising in some jurisdictions.</em> © 2023 THOMPSON HINE LLP. ALL RIGHTS RESERVED.

They Are Coming and You Need to Be Prepared – Regulations and the Use of AI and Machine Learning in Business Decision Making

Services