Professional Ethics, Regulation and Emerging DevelopmentsIntroduction and contextActuarial mathematics is applied within institutions that affect people’s financial security. Premiums, reserves, capital requirements, pension benefits and claims decisions may influence whether households can obtain insurance, retire with dignity or recover from catastrophe. Technical competence is therefore necessary but insufficient. Actuaries must also exercise professional judgement, comply with applicable law and standards, communicate uncertainty honestly, protect confidential information and recognise the social consequences of their recommendations. The modern actuarial role extends beyond traditional pricing and reserving. Actuaries increasingly work with climate scenarios, longevity improvement, artificial intelligence, telematics, embedded insurance, cyber risk and regulatory reporting. These developments create opportunities for better risk measurement, but they also introduce problems involving data quality, explainability, discrimination, privacy and accountability. This chapter presents a practical framework for ethical and regulated actuarial work. Specific legislation and professional standards differ across jurisdictions; consequently, the actuary must identify the rules applicable to the assignment rather than assume that a general international principle is sufficient. Learning objectivesAfter studying this chapter, the reader should be able to: - Explain the relationship between professional ethics, actuarial standards and insurance regulation.
- Apply professional judgement, documentation and communication requirements.
- Identify conflicts of interest, unfair discrimination, privacy risks and governance weaknesses.
- Explain the actuarial implications of climate risk, longevity change, embedded insurance and usage-based products.
- Evaluate changing regulatory reporting and the responsible use of data analytics and artificial intelligence.
- Recommend defensible actions in an applied professional scenario.
1. Ethics, law and professional standards1.1 Three layers of responsibilityActuarial work is governed by three related but distinct layers: | Layer | Main question | Typical source |
|---|
| Law and regulation | What is legally required or prohibited? | Insurance legislation, regulations and supervisory directions | | Professional standards | What constitutes competent and appropriate actuarial practice? | Professional standards and practice guidelines | | Ethics | What conduct is honest, fair and in the public interest? | Code of conduct, professional principles and moral reasoning |
Compliance with law is a minimum requirement. A technically legal action may still be unethical—for example, exploiting a customer’s misunderstanding of a complex product. Conversely, an actuary may face situations in which a regulation is unclear. Professional judgement, consultation and careful documentation then become essential. 1.2 Core ethical principlesAlthough wording differs between professional bodies, the following principles are widely recognised: - Integrity: act honestly and do not knowingly mislead.
- Competence and care: accept work only when suitably qualified, obtain necessary assistance and review the work adequately.
- Impartiality: identify and manage conflicts of interest and avoid inappropriate bias.
- Confidentiality: protect information obtained through professional work, subject to lawful disclosure obligations.
- Compliance: follow relevant laws, regulatory requirements and professional standards.
- Communication: present methods, assumptions, limitations and uncertainty clearly.
- Public interest: consider the effects of actuarial advice on policyholders, beneficiaries, investors and society, not only the immediate client.
Ethical conduct is not limited to refusing fraud. It includes asking whether assumptions are reasonable, whether a model disadvantages a protected group, whether a report could be misunderstood and whether a limitation has been disclosed prominently enough. 2. Professional judgement and actuarial standardsActuarial standards generally require work to be technically sound, appropriate to its purpose and capable of independent review. They rarely prescribe a single answer. Instead, they establish principles concerning assumptions, data, methods, materiality, documentation and communication. 2.1 A structured judgement processA defensible process can be expressed as seven stages: - Define the assignment: identify the decision, users, time horizon, legal entity and intended use of the result.
- Identify obligations: list applicable laws, standards, internal policies and contractual requirements.
- Assess data: examine completeness, accuracy, relevance, representativeness and possible bias.
- Select methods and assumptions: consider alternatives, evidence, uncertainty and materiality.
- Challenge the result: perform sensitivity tests, reasonableness checks, peer review and scenario analysis.
- Communicate: explain the result, limitations, uncertainty and responsibilities of each user.
- Document and monitor: retain evidence supporting the judgement and update it when circumstances change.
Professional judgement does not mean personal preference. It is a reasoned conclusion based on evidence, standards, experience and an explicit assessment of uncertainty. 2.2 Materiality and proportionalityNot every decision requires the same degree of analysis. A small operational estimate may be reviewed differently from a solvency valuation affecting millions of policyholders. Proportionality permits methods and controls to reflect the likely impact of error, complexity and uncertainty. It does not justify ignoring important risks merely because analysis is inconvenient. A useful qualitative materiality assessment considers: - potential financial effect;
- number and vulnerability of affected policyholders;
- effect on regulatory capital or solvency;
- likelihood of error;
- reversibility of the decision;
- reputational and legal consequences.
2.3 DocumentationA professional file should enable another competent actuary to understand and reproduce the work. It should normally contain: - purpose, scope and intended users;
- data sources, extraction dates and validation procedures;
- methods, assumptions and rationale;
- alternative approaches considered;
- model version, controls and limitations;
- sensitivity and scenario results;
- review comments and how they were resolved;
- approvals, sign-offs and distribution restrictions.
Documentation is not merely an administrative record. It is a control against hindsight bias, undocumented changes and excessive reliance on individual memory. 3. Communication of actuarial informationActuarial results are often used by non-specialists. A report should distinguish clearly among facts, assumptions, judgements, projections and recommendations. It should not imply that a forecast is a guarantee. A sound communication normally identifies: - the question addressed;
- the population and period covered;
- the data and method used;
- key assumptions and their sources;
- results and ranges where appropriate;
- sensitivity to material assumptions;
- limitations and excluded risks;
- the intended users and permitted use;
- the date at which the conclusion applies.
For example, stating that “the expected loss ratio is 68%” without explaining the exposure period, claim definition, development assumptions and uncertainty may create false precision. A better statement explains that 68% is a central estimate under specified assumptions and provides relevant sensitivity information. Communicating uncertaintyUncertainty can arise from random variation, parameter uncertainty, model uncertainty, data limitations and future structural change. It may be communicated through ranges, confidence intervals, stress scenarios, probability distributions or qualitative warnings. The chosen method should suit the audience and decision. A probability statement must also be defined carefully. “There is a 10% probability of a severe loss” should identify the event, time horizon, model basis and relevant exposure. Otherwise users may interpret it as a general guarantee about the insurer’s future. 4. Conflicts of interest, fairness and privacy4.1 Conflicts of interestA conflict exists when personal, financial, organisational or professional interests could improperly influence judgement—or reasonably appear to do so. Examples include: - advising both sides of a transaction without appropriate controls;
- receiving incentives linked to a product’s profitability;
- reviewing one’s own prior work;
- pressure from management to select favourable assumptions;
- using confidential information for personal advantage.
The appropriate response is not always withdrawal. Depending on the circumstances, controls may include disclosure, informed consent, segregation of duties, independent review or reassignment. If impartiality cannot be maintained, the actuary should decline or cease the assignment. 4.2 Fairness and discriminationInsurance necessarily differentiates among risks. Differentiation is not automatically unfair discrimination, but it should be relevant, evidence-based, proportionate and legally permissible. A variable may be problematic even if it is not explicitly a protected characteristic: a proxy variable can reproduce unequal treatment. Fairness questions include: - Is the variable causally or statistically relevant to the insured risk?
- Is the data representative of the proposed customer population?
- Are errors distributed unevenly across groups?
- Does the product create access barriers for vulnerable customers?
- Is the customer able to understand and challenge the outcome?
- Are discounts or penalties proportionate to behaviour and risk?
Fairness has several meanings, including equal treatment, equal opportunity, actuarial fairness, consumer protection and outcomes-based fairness. These meanings can conflict. A transparent governance process should state which fairness objectives are being pursued and why. 4.3 Privacy and data governanceActuarial analysis increasingly uses health, location, transaction, biometric and behavioural data. Privacy governance should address lawful collection, purpose limitation, data minimisation, security, retention, access rights and controlled sharing. Sensitive data should not be collected merely because it is technically available. A privacy impact assessment is appropriate where processing is extensive, intrusive or likely to affect individuals materially. Controls may include pseudonymisation, encryption, role-based access, audit logs, restricted retention and aggregation. Privacy protection is not only a legal issue: a data breach can undermine trust and create financial and reputational losses. 5. Regulatory architecture and reportingInsurance regulation seeks to protect policyholders, promote financial soundness and support orderly markets. Common regulatory functions include: - licensing and authorisation;
- governance and fit-and-proper requirements;
- technical provisions or reserves;
- solvency and capital requirements;
- reinsurance and risk-transfer controls;
- conduct and disclosure supervision;
- market reporting and supervisory data;
- intervention, recovery and resolution.
Many regimes use a risk-based capital concept. In simplified form, a solvency ratio may be represented as: Solvency ratio = Available capital ÷ Required capital Available capital is capital recognised under the relevant regulatory rules; required capital is the prescribed risk-based capital requirement. Both quantities must be measured using the jurisdiction’s definitions, valuation rules and aggregation methods. The ratio is not automatically comparable across jurisdictions. Regulatory reporting increasingly involves granular, machine-readable data rather than occasional narrative returns. This creates a chain of accountability from source system to reported figure. Data lineage should show where a field originated, how it was transformed, which controls were applied and who approved the submission. Regulatory reporting risksImportant risks include inconsistent definitions between finance, actuarial and risk functions; manual spreadsheet changes; late data; model-version confusion; weak reconciliation; and reporting that is technically complete but misleading in context. Governance should include ownership of each data item, validation rules, exception handling, change control and documented sign-off. 6. Emerging actuarial developments6.1 Climate riskClimate risk has physical and transition dimensions. Physical risk includes changes in frequency or severity of floods, storms, heat, drought and wildfire. Transition risk arises from changes in technology, policy, regulation, markets and consumer behaviour during movement toward a lower-carbon economy. Liability and litigation risk may also be material. Climate risk affects underwriting, claims, asset values, reinsurance, liquidity and business continuity. Historical data may be a poor guide when hazard distributions are changing. Actuaries should therefore combine historical experience with catastrophe models, climate science, scenario analysis and expert judgement. A practical climate assessment considers: - exposure location and vulnerability;
- hazard pathways and time horizons;
- adaptation and mitigation measures;
- concentration and accumulation risk;
- reinsurance and capital implications;
- uncertainty and model limitations.
Climate scenarios are not forecasts with known probabilities in the ordinary sense. They are structured descriptions of possible futures. Reports should avoid presenting one scenario as a certain outcome. 6.2 Longevity improvementPension and life insurers face the possibility that people live longer than assumed. Longevity risk can be analysed through mortality rates, improvement scales, cohort effects and socioeconomic differences. A simple expected present value of a future benefit can be expressed as: EPV = ∑ᵗ Bₜ × vᵗ × pₓ⁽ᵗ⁾ Here, Bₜ is the benefit payable at time t, v is the discount factor per period, and pₓ⁽ᵗ⁾ is the probability that a person aged x survives to time t. The summation covers all relevant payment times. The formula assumes that benefit amounts, discount factors and survival probabilities are defined consistently and that payment timing is correctly represented. Longevity assumptions should reflect trend uncertainty, cohort effects, improvements in medical treatment and differences among populations. Stress testing may consider faster improvement, adverse selection and basis risk in longevity hedges. A model using an apparently sophisticated mortality law can still be inappropriate if its data are not relevant to the insured population. 6.3 Embedded insuranceEmbedded insurance integrates cover into another purchase or digital journey, such as travel booking, vehicle finance or an online marketplace. Benefits include convenience, improved distribution and potentially lower acquisition costs. Risks include poor customer understanding, limited comparison, unclear responsibility among partners and consent problems when data are shared. Governance should define the roles of insurer, distributor, platform and claims administrator. Product design should make coverage, exclusions, cancellation rights, claims procedures and pricing visible at the point of sale. The ease of purchasing must not replace suitability and informed consent. 6.4 Usage-based and behavioural productsTelematics and usage-based insurance may price according to mileage, driving time, speed patterns, braking or location. They can improve risk differentiation and encourage safer behaviour. However, sensor error, connectivity gaps, privacy concerns and unequal access to technology may create unfair outcomes. An actuary should assess whether the behavioural measure is stable, relevant and controllable by the customer. The pricing model should specify treatment of missing data, device malfunction, exceptional journeys and disputes. Monitoring should test whether the product produces systematically adverse outcomes for particular groups. 6.5 Artificial intelligence and automated decision-makingMachine-learning models may identify nonlinear relationships and process large data sets, but predictive accuracy does not establish fairness or causal validity. Governance should address: - data provenance and representativeness;
- target-variable quality;
- explainability and customer communication;
- drift and performance monitoring;
- human oversight and escalation;
- adversarial manipulation and cybersecurity;
- reproducibility and model version control.
A model should not be treated as neutral merely because it is mathematically complex. Human accountability remains necessary for material decisions affecting customers or solvency. 7. Illustrative case: climate-sensitive property pricingBackgroundA regional insurer writes household property business in areas increasingly exposed to flood and wildfire. Management asks the actuarial function to introduce a new location-based pricing model using historical claims, satellite information and external hazard scores. ProblemThe model produces substantially higher premiums in several low-income districts. Some variables are highly correlated with neighbourhood income and ethnicity. Historical claims are sparse in recently developed areas, and the external hazard score has not been independently validated. Management wishes to implement the model before the next renewal cycle. AnalysisThe actuary identifies four issues. First, the data may not represent future climate conditions. Second, proxy discrimination may arise even if protected characteristics are excluded. Third, the hazard score may contain unknown modelling assumptions. Fourth, the implementation timetable creates pressure to reduce review and documentation. The actuary conducts data validation, compares alternative specifications, tests outcomes by demographic and geographic group where legally permissible, and performs sensitivity analysis under several climate scenarios. The actuary also examines mitigation measures such as flood barriers, building standards and wildfire-resistant construction rather than relying solely on neighbourhood averages. Approach and solutionThe recommended approach is a staged implementation: - validate the external hazard data and document limitations;
- remove or constrain variables with weak risk relevance or unacceptable proxy effects;
- introduce property-level mitigation credits supported by evidence;
- cap annual changes temporarily to protect customers from abrupt shocks;
- establish an appeals and correction process;
- obtain legal, compliance and independent actuarial review;
- monitor claims, complaints, take-up and distributional outcomes after launch.
The report explains that the model is a pricing tool, not a precise prediction of an individual property’s loss. It identifies climate uncertainty and recommends periodic recalibration. OutcomeThe insurer delays full deployment, uses a controlled pilot and improves data governance. Premium adequacy is preserved while several customers receive more risk-relevant mitigation credits. The governance committee obtains a documented basis for deciding whether the model remains acceptable. Learning pointsTechnical predictive power is only one part of professional acceptability. Ethical actuarial work connects model design, regulatory compliance, fairness, customer communication and monitoring. A defensible decision may be to delay implementation when evidence and controls are inadequate. 8. Best-practice frameworkAn actuarial function can strengthen professional practice by adopting the following controls: - maintain an obligations register for each material assignment;
- use documented assumption-setting and model-change procedures;
- require independent review for high-impact work;
- maintain data lineage and reproducible model versions;
- conduct fairness, privacy and customer-impact assessments;
- distinguish regulatory minimums from management preferences;
- communicate ranges, sensitivities and limitations;
- train staff in law, ethics, data governance and emerging risks;
- establish escalation channels free from commercial retaliation;
- monitor outcomes after implementation rather than treating approval as final.
These controls should be proportionate, but proportionality must be justified. The responsible actuary remains accountable for professional conclusions even when analysis is outsourced or automated. 9. Challenges and limitationsEthical and regulatory practice faces several persistent difficulties. Standards may be principles-based and therefore require interpretation. Different jurisdictions may impose conflicting obligations. Data may be incomplete precisely for vulnerable or newly insured populations. Fairness metrics may conflict with one another. Climate and longevity models involve deep uncertainty. Commercial deadlines may discourage challenge. Finally, an apparently transparent explanation may still be incomprehensible to a customer. These limitations do not make actuarial analysis impossible. They require explicit uncertainty management, consultation, governance and humility. The strongest professional opinion is not necessarily the most confident one; it is the one whose evidence, limitations and consequences are clear. Chapter SummaryProfessional actuarial work combines technical analysis with ethical conduct, legal compliance and accountable judgement. Actuaries should define assignments, identify obligations, assess data, justify methods, challenge results, communicate uncertainty and retain adequate documentation. Conflicts of interest require disclosure and effective controls; fairness requires attention to relevance, proportionality, proxies and customer outcomes; and privacy requires disciplined data governance. Insurance regulation commonly addresses licensing, governance, reserves, capital, conduct and reporting. Risk-based reporting increasingly depends on reliable data lineage and model governance. Emerging developments—including climate risk, longevity change, embedded insurance, usage-based products and artificial intelligence—create new opportunities but also introduce model, privacy, fairness and accountability risks. Professional judgement must therefore remain evidence-based, transparent, reviewable and directed toward the public interest. Key TermsProfessional ethics: Principles governing honest, competent, impartial and responsible professional conduct. Actuarial standard: A formal requirement or principle describing appropriate actuarial practice. Professional judgement: A reasoned conclusion based on evidence, standards, experience and uncertainty assessment. Materiality: The significance of an error or omission to a decision or user. Documentation: Recorded evidence of scope, data, methods, assumptions, controls and conclusions. Conflict of interest: A situation in which interests may improperly influence, or appear to influence, judgement. Fairness: The ethically and legally acceptable treatment of customers or groups. Proxy discrimination: Unfair differentiation produced through variables correlated with protected characteristics. Privacy: Protection of personal information and control over its collection and use. Data lineage: The traceable movement and transformation of data from source to report. Solvency ratio: Available regulatory capital divided by required regulatory capital. Physical climate risk: Loss arising from climate-related hazards such as flood, heat or wildfire. Transition risk: Risk arising from economic, technological, policy or market change during decarbonisation. Longevity risk: Risk that people live longer than assumed. Embedded insurance: Insurance offered within another product, service or customer journey. Usage-based insurance: Cover or pricing influenced by measured use or behaviour. Model risk: Risk of adverse consequences from inappropriate model design, data or use. Explainability: The ability to communicate how a model or decision produces its result. Review QuestionsShort Answer Questions- Distinguish among law, professional standards and ethics.
- List four items that should normally appear in an actuarial work file.
- What is a conflict of interest, and name two possible controls?
- Distinguish physical climate risk from transition risk.
- Why is data lineage important in regulatory reporting?
Long Answer Questions- Explain a structured process for exercising and documenting actuarial judgement.
- Discuss fairness and privacy issues in usage-based insurance.
- Explain how climate uncertainty can affect property insurance pricing and capital assessment.
- Analyse the governance requirements for artificial-intelligence models used in insurance.
- Discuss why effective communication of uncertainty is a professional responsibility.
Analytical / Application Questions- An insurer wants to use social-media activity as a pricing variable. Assess the proposal using relevance, fairness, privacy, data quality and governance criteria.
- A longevity model reduces pension liabilities substantially because it uses a short period of unusually high mortality. Identify the professional concerns and recommend review procedures.
- A platform sells embedded travel insurance through a single “accept” button. Design controls to improve informed consent, disclosure, data protection and claims accountability.
Multiple Choice Questions with AnswersQuestion 1Which statement best describes the relationship between law and professional ethics? A. Anything legal is automatically ethical. B. Ethics is irrelevant when regulations are detailed. C. Law establishes minimum obligations, while ethics may require broader responsible conduct. D. Professional ethics replaces the need to follow law. Correct Answer: C. Law establishes minimum obligations, while ethics may require broader responsible conduct. Question 2Which item most directly supports reproducibility of actuarial work? A. A commercially favourable conclusion B. Documented data sources, assumptions, methods and model version C. A verbal assurance from management D. An undocumented spreadsheet adjustment Correct Answer: B. Documented data sources, assumptions, methods and model version Question 3A variable that is not a protected characteristic but is strongly correlated with one may create which risk? A. Proxy discrimination B. Interest-rate risk C. Pure longevity risk D. Reinsurance credit risk Correct Answer: A. Proxy discrimination Question 4In the simplified expression Available capital ÷ Required capital, the denominator represents: A. Premium income B. Claims paid C. Required regulatory capital D. Shareholder dividends Correct Answer: C. Required regulatory capital Question 5Which is an example of physical climate risk? A. A carbon tax affecting an industry B. A change in emissions disclosure rules C. A flood becoming more frequent and severe D. A change in investor preference for green assets Correct Answer: C. A flood becoming more frequent and severe Question 6Longevity risk occurs when: A. Policyholders die earlier than expected only B. People live longer than assumed in liabilities or pricing C. Interest rates never change D. Claims data are perfectly complete Correct Answer: B. People live longer than assumed in liabilities or pricing Question 7Which control is most appropriate for a material automated insurance decision? A. Remove all human oversight B. Allow model changes without version control C. Use monitoring, escalation and documented model governance D. Collect every available personal datum Correct Answer: C. Use monitoring, escalation and documented model governance Question 8Embedded insurance is best described as: A. Insurance offered only through a government pool B. Insurance integrated into another product or customer journey C. Insurance that excludes digital distribution D. Insurance priced only by age Correct Answer: B. Insurance integrated into another product or customer journey Question 9Why should climate scenarios not automatically be presented as forecasts with known probabilities? A. Scenarios describe structured possible futures and involve deep uncertainty. B. Climate risk has no effect on insurance. C. Historical data always provide exact future probabilities. D. Regulators prohibit all scenario analysis. Correct Answer: A. Scenarios describe structured possible futures and involve deep uncertainty. Question 10Which communication is most professionally appropriate? A. Presenting a central estimate as a guaranteed outcome B. Reporting a result without stating its assumptions C. Explaining the estimate, assumptions, limitations and relevant sensitivity D. Using technical language without identifying intended users Correct Answer: C. Explaining the estimate, assumptions, limitations and relevant sensitivity
|