Federal Insurance Office (FIO) — Insurance Systemic Risk Monitoring

Insurance is the one major sector of American finance that Congress has historically left to the states. The McCarran-Ferguson Act of 1945 (15 U.S.C. §§ 1011–1015) explicitly preserved state regulation of insurance as the primary framework, and unlike banking (where federal charters exist alongside state charters), there is no federal insurance charter or federal insurance regulator in the traditional sense. The 2008 financial crisis changed the conversation dramatically: the near-collapse of AIG — the world's largest insurer — demonstrated that insurance companies could pose systemic risk to the entire financial system, and that the patchwork of 50 state regulators had no framework to identify or address that risk.

Congress's response was the Federal Insurance Office (FIO), created by Title V of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, codified at 31 U.S.C. § 313. The FIO does not regulate insurers, does not issue licenses, and does not supervise insurance companies directly — those functions remain with state regulators. Instead, the FIO monitors the insurance industry, identifies systemic risks and regulatory gaps, advises the Secretary of the Treasury on insurance policy, coordinates U.S. positions in international insurance forums, and reports annually to Congress on the state of the insurance industry.

Current Law (2026)

Legal Authority

• 31 U.S.C. § 313(a) — Establishment: there is established in the Department of the Treasury the Federal Insurance Office
• 31 U.S.C. § 313(c) — FIO functions: (1) monitor all aspects of the insurance industry, including identifying issues or gaps in the regulation of insurers that could contribute to a systemic crisis in the insurance industry or the U.S. financial system; (2) monitor the extent to which traditionally underserved communities and consumers have access to affordable insurance products; (3) recommend to FSOC that it designate an insurer as a SIFI; (4) assist the Secretary in administering the Terrorism Risk Insurance Program (TRIP); (5) coordinate federal efforts and develop federal policy on prudential aspects of international insurance matters; (6) determine whether state insurance measures are preempted by covered agreements
• 31 U.S.C. § 313(e) — Annual report: FIO shall submit annually to Congress a report on the insurance industry, including a description of the significant insurance or market developments
• 31 U.S.C. § 313(f) — Modernization study: FIO shall study and submit a report to Congress on how to modernize and improve the system of insurance regulation, including options for state, federal, and hybrid regulatory structures
• 31 U.S.C. § 313(j) — Access to data: FIO may require insurers and affiliates to submit data and information; may share data with FSOC and relevant state regulators
• 12 U.S.C. § 5383 — FSOC designation process (Dodd-Frank § 113): FSOC, upon FIO recommendation, may designate a nonbank financial company (including an insurer) as systemically important, subjecting it to Federal Reserve supervision
• 15 U.S.C. § 1011 (McCarran-Ferguson Act) — State regulation of insurance is in the public interest; federal antitrust laws do not apply to the business of insurance to the extent regulated by state law — the foundational principle that the FIO is designed to operate within

Why Insurance Is Federally Under-Regulated (and Why That Changed)

The McCarran-Ferguson framework: Insurance regulation in the U.S. is primarily a state function. Each of the 50 states, plus D.C. and the territories, has its own insurance department, its own licensing requirements, its own solvency standards, and its own rate approval processes. This means an insurance company operating nationally faces 50 different regulatory regimes. For most purposes — life insurance, auto insurance, homeowners insurance — state regulation has worked reasonably well. State guaranty funds (not federally insured) protect policyholders if an insurer becomes insolvent.

The AIG problem: The failure that prompted FIO's creation was the near-collapse of AIG in September 2008. AIG's insurance subsidiaries were regulated by their respective state insurance departments — and they were largely solvent. But AIG's unregulated financial products subsidiary (AIG Financial Products) had sold hundreds of billions of dollars of credit default swaps — essentially insurance policies on mortgage-backed securities — without setting aside adequate reserves. When the housing market collapsed, AIG could not make good on those obligations. No state insurance regulator had visibility into AIG Financial Products. The Federal Reserve and Treasury ultimately committed $182 billion in government support to prevent AIG's collapse, fearing that its failure would trigger a systemic cascade. The AIG crisis created the political consensus that some federal monitoring of insurance systemic risk was essential.

FIO's Core Functions

Systemic Risk Monitoring

FIO monitors the insurance industry for risks that could threaten the broader financial system. This is fundamentally different from traditional insurance regulation, which focuses on whether individual companies can pay policyholder claims (solvency regulation). FIO looks at:

• Concentration risk (if a handful of reinsurers dominate the market, their failure creates systemic exposure)
• Interconnectedness (insurance companies invest heavily in corporate bonds, equities, and mortgage-backed securities — creating links to banking system stresses)
• Climate risk (insurers are both exposed to climate-related claims and major investors in affected assets)
• Cyber insurance (as cyber incidents proliferate, insurance industry concentration and systemic risk from correlated cyber losses)

FSOC SIFI Designations

FIO can recommend to the Financial Stability Oversight Council (FSOC) that a nonbank financial company — including an insurance company — be designated as a Systemically Important Financial Institution (SIFI). For insurance market withdrawals in climate-vulnerable areas, see National Flood Insurance Program. A SIFI designation subjects the company to enhanced prudential standards and supervision by the Federal Reserve (not state regulators). This is FIO's most powerful — and most contested — tool.

The MetLife controversy: The Obama-era FSOC designated MetLife as a SIFI in 2015. MetLife sued, and a federal district court vacated the designation in 2016 (finding the FSOC's analysis inadequate). The Trump administration did not appeal, and MetLife's SIFI designation was removed. The episode chilled further SIFI designations of insurance companies and led FSOC to revise its designation framework under both Republican and Democratic administrations. As of 2026, no insurance company carries a SIFI designation.

Post-MetLife framework: FSOC now takes an "activities-based" approach to systemic risk monitoring (looking at risky activities industry-wide rather than designating individual firms) as a first step, with company-specific designations reserved for cases where activity-based approaches are insufficient. FIO plays a key role in providing the insurance industry data that informs this analysis.

International Coordination

Insurance is increasingly international — the major reinsurers (Munich Re, Swiss Re, Hannover Re, Lloyd's of London) are foreign-domiciled. The U.S. negotiates trade agreements and prudential standards in international forums including:

• International Association of Insurance Supervisors (IAIS): The global standard-setter for insurance regulation; FIO represents the U.S. alongside state regulators through the National Association of Insurance Commissioners (NAIC)
• G-20 Financial Stability Board: FIO participates in FSB working groups on nonbank financial intermediation
• EU Covered Agreement: FIO negotiated a covered agreement with the EU (2017, updated 2018) addressing reinsurance collateral requirements and group supervision — allowing EU reinsurers to operate in the U.S. without posting 100% collateral and allowing U.S. groups to be supervised at the group level by the home state rather than each EU member state

FIO's preemption authority: When a covered agreement with a foreign government conflicts with state insurance laws, FIO can recommend that the Secretary of the Treasury preempt the state law. This is a significant (if rarely used) federal power over otherwise state-regulated insurance.

Insurance Access and Affordability Monitoring

FIO monitors the extent to which underserved communities have access to affordable insurance. This includes:

• Availability of homeowners insurance in climate-distressed markets (California wildfire, Florida hurricane, Gulf Coast flood zones)
• Availability of auto insurance in low-income urban areas
• Life insurance access gaps
• The intersection of redlining history with current insurance availability

FIO publishes data on insurance availability and affordability and has flagged climate-driven insurance market withdrawals as a growing national policy concern.

How It Affects You

If you own a home in a climate-vulnerable area (California, Florida, Gulf Coast, Appalachian flood zones): FIO has increasingly spotlighted the insurance affordability crisis in climate-exposed markets. As private insurers have withdrawn from wildfire, hurricane, and flood-prone markets, homeowners are left with state FAIR plans (insurers of last resort that typically provide less coverage at higher prices) or going uninsured. FIO's annual reports document these trends and provide data to support potential federal interventions. While FIO itself has no power to force insurers to offer coverage or set rates — those remain state functions — its reports influence federal legislative and policy responses, including potential federal reinsurance backstops and the ongoing National Flood Insurance Program debate. If you're in a market with collapsing private insurance, the FIO data can help you understand whether the withdrawal is a systemic national pattern (which might support federal action) or a state-specific regulatory failure (which might be addressed at the state level). See your state's insurance department for immediate coverage options; FIO tracks state regulatory responses.

If you work at an insurance company or work in insurance investment: FIO's data collection authority (31 U.S.C. § 313(j)) means large insurers may receive FIO data requests for information beyond what state regulators require. These requests can be extensive — FIO has authority to require submission of data from insurers and their affiliates. If your company is large enough to be on FSOC's monitoring radar, FIO analysis may inform whether FSOC initiates a designation review. The current activities-based approach means that industry-wide activities (concentrated exposure to a specific asset class, high leverage through derivatives, excessive short-term funding) are more likely to trigger scrutiny than size alone. Insurance companies should monitor FIO's annual reports and FSOC's annual reports for signals about which activities are drawing regulatory concern.

If you work in financial regulation or systemic risk policy: FIO represents a deliberate compromise — federal monitoring without federal regulation — and its effectiveness is an ongoing policy debate. Critics argue FIO lacks teeth: it can monitor and recommend but cannot act. When the California insurance market broke down in 2024-2025 and major insurers stopped writing homeowners policies, FIO could document the crisis but had no authority to compel action. Supporters argue that FIO's data aggregation and international coordination functions are genuinely valuable and that giving FIO direct regulatory authority would require dismantling the McCarran-Ferguson framework that has underpinned state insurance regulation for 80 years. The next major systemic event in insurance — whether climate-driven, cyber-driven, or otherwise — will test whether FIO's monitoring role is sufficient or whether more direct federal authority is needed.

State Variations

FIO explicitly operates within the McCarran-Ferguson framework — it defers to state regulation on most matters and avoids preempting state insurance law. The key points of federal-state interface:

• State insurance commissioners (organized through the NAIC) remain the primary insurance regulators. FIO coordinates with state regulators through FSOC's Insurance Advisory Committee.
• SIFI designation bypasses state regulation entirely — if an insurer is designated as a SIFI, the Federal Reserve becomes its primary federal regulator, adding a federal layer atop state regulation.
• Covered agreements (negotiated by FIO with foreign governments) can preempt state law — this has occurred with the EU and UK covered agreements on reinsurance collateral, where FIO's negotiated terms superseded state collateral requirements.
• State guaranty funds (not federal) protect policyholders when insurers fail — there is no FDIC equivalent for insurance. Each state has its own guaranty fund with different coverage limits. Policyholders in failed insurance companies are protected by the guaranty fund of the state where they live, not where the insurer is domiciled.

Recent Developments

• 2023-2024 — Climate insurance crisis: FIO released a major report on climate-related financial risk in the U.S. insurance sector, finding that insurers are withdrawing from high-risk markets faster than state regulators are adapting. The report called for improved data collection, modeling transparency, and potential federal backstop mechanisms. California, Florida, and Louisiana experienced the most acute market disruptions.
• 2024 — Homeowners insurance data collection: FIO finalized a rule requiring large homeowners insurers to submit detailed data on policy issuances, non-renewals, and claims by zip code — enabling national-level analysis of insurance availability and affordability gaps. The data collection was challenged by insurance industry groups arguing it duplicates state data requirements.
• 2025 — Cyber insurance systemic risk: FIO and FSOC flagged correlated cyber risk as an emerging systemic concern. If a single major cyber event (a cloud infrastructure disruption, a widespread ransomware attack) triggers simultaneous claims from thousands of policyholders across multiple insurers, the industry's aggregate exposure could exceed available reinsurance capacity. FIO recommended scenarios-based stress testing for the insurance sector.
• 2025 — SIFI framework review: FSOC released updated guidance on the SIFI designation process under the activities-based framework. No insurance company is currently designated; FSOC's Insurance Advisory Committee (which includes FIO) continues to monitor private equity-owned insurers and life insurers with substantial liquidity mismatches as areas of potential concern.
• 2025-2026 — Terrorism Risk Insurance Program: FIO assists Treasury in administering TRIP (the federal terrorism reinsurance backstop). With the program due for reauthorization in 2027, FIO is developing analysis of the program's coverage and cost structure for Congress.