← Selected work

Published research

The regulator wrote the notice. Nobody shipped it.

On 30 September 2021, Virginia shortened, by one sentence on one form, the window a policyholder has to challenge a cancellation or non-renewal. Two years later, Delaware examiners pulled GEICO’s termination files and found seventy-three notices still quoting the old sentence.

Published
August 2026
Sources
State market conduct examination reports, regulatory settlements, NAIC Market Conduct Annual Statement (MCAS) scorecards

This is a designer reading public regulatory documents, not a compliance advisor. No finding here asserts a legal conclusion — where a violation is named below, it is because an examination found it, and this piece reports what the examination states.

A sentence that stopped being correct

On 30 September 2021, Virginia changed a deadline. Insureds facing cancellation or non-renewal would now have twenty days to ask the Commission for a review, not fifteen days to request a hearing. Small change. One sentence on one form.

Two years later, Delaware examiners pulled GEICO’s termination files and found seventy-three notices still carrying the old sentence — fifteen days, and the word “hearing.” The form was CCNRPolOfrDE (12-14), a December 2014 template, superseded in 2021 and still in production at the end of 2023.

Nobody wrote a wrong sentence. A correct sentence stopped being correct, and no process noticed for two years.

I audit insurance interfaces for a living — most recently tearing down an embedded-protection attach flow on two live storefronts — so I went looking for how common that is.

What the examinations actually find

Delaware’s GEICO examination produced 168 exceptions across a book of $36.3 billion in national premium. Examiners attributed 137 of them — 82% — to communication artifacts: a required message that was wrong, missing, late, or that could not be proven to have been sent.

The distribution is worth sitting with.

Delaware market conduct examination of GEICO — distribution of the 168 exceptions found
What failed Count
Superseded statutory text in termination notices 73
Uninsured vehicles not reported to the DMV 17
Proof of mailing could not be produced 14
Termination notices omitting the required offer to exclude a driver 10
Credit-related notices not sent 8
Denial letters not sent 4
Standard claim forms missing mandated fraud language 4
Claims reviewed with no Statute of Limitations notice, of 1,100 reviewed 105

And the part that makes the point: everything that wasn’t a message came back clean. Examiners found zero exceptions in new business underwriting, zero in renewals, zero in rate testing — where they manually re-rated policies against the filed manuals — zero in declinations, and zero in marketing and sales.

The pricing works. The underwriting works. The company fails its examination almost entirely in the layer where it talks to customers.

One notice, nineteen carriers, twelve years

Virginia runs a dedicated Statutory Notices Review in every comprehensive examination — notices are a tested category, alongside rating, terminations and claims. That makes the archive comparable in a way most states’ aren’t.

I read nineteen of them. Every one found violations of the same provision: § 38.2-610 A, the Adverse Underwriting Decision notice — the letter you get when a carrier declines, cancels, or rates you up, telling you why and how to contest it.

American Strategic, Lemonade, Root, Spinnaker, Progressive, Elephant, State Farm Fire & Casualty, State Farm Mutual Automobile, Metromile, Southern Insurance of Virginia, Equity, Dairyland, American Mercury, Hanover, Allmerica, Universal North America, Erie, Virginia Farm Bureau, Selective. Examinations as of 2014 through 2022, orders from 2016 through 2026.

Nineteen carriers cited for AUD notice violations, Virginia SCC market conduct examinations
Carrier Exam as of Order date § 38.2-610 A Failure mode
American Strategic 31 Dec 2015 1 Aug 2017 31 Not provided (insured + applicant)
Lemonade 31 Dec 2020 26 Mar 2024 23 Not provided; no reason given; non-compliant notice
Root 30 Jun 2020 28 Apr 2023 20 Not provided; prototype mismatch (AL 2015-07)
Spinnaker 31 Dec 2020 19 Dec 2023 19 Not provided (18); notice incomplete (1)
Progressive (5 cos.) 31 Mar 2016 9 Oct 2019 18 Notice did not comply with statute
Elephant 31 Aug 2016 1 Nov 2018 13 Not provided (insured + applicant)
State Farm Fire & Casualty 30 Jun 2014 12 Apr 2017 13 Not provided; prototype mismatch (AL 1981-16)
State Farm Mutual Auto 30 Jun 2014 12 Apr 2017 13 Not provided; prototype mismatch (AL 1981-16)
Metromile 30 Sep 2018 20 Aug 2020 8 Not provided
Southern Insurance of Virginia 30 Jun 2022 20 Apr 2026 5 Not provided (applicant)
Equity 30 Jun 2014 14 Apr 2016 5 Not provided
Dairyland 31 Dec 2017 20 Aug 2020 4 Prototype mismatch (AL 2015-07)
American Mercury 31 Aug 2015 10 Jul 2018 3 Not provided
Hanover 30 Jun 2021 16 Jan 2025 2 Notice not available for use
Allmerica Financial Benefit 30 Jun 2021 16 Jan 2025 2 Notice not available for use
Universal North America 11 Apr 2016 2 Not provided
Erie 30 Jun 2018 19 Dec 2019 1 Not provided
Virginia Farm Bureau F&C 31 Aug 2015 14 Jun 2017 1 Not provided
Selective 30 Jun 2019 22 Mar 2022 1 Prototype mismatch (AL 2015-07)

Four failure modes recur. The notice wasn’t provided. The notice went out but didn’t match the Bureau’s approved wording. The notice went out incomplete — no specific reason, no route to obtain one. Or, in Hanover and Allmerica’s case, the notice wasn’t available for use at all.

Two explanations that don’t survive

“Legacy systems.” Lemonade, Root, Metromile and Elephant were founded between 2011 and 2015. No legacy policy administration. Mobile-first, API-first, built by engineers who have never seen a mainframe. Between them: 64 violations of that one statute. Lemonade alone drew 23, in three distinct failure modes, including a single finding of 18 on rejected homeowner applications.

“They didn’t know what to send.” Virginia publishes a prototype. The Bureau wrote the notice for them — in Administrative Letter 1981-16, issued the same year the requirement was enacted, and again in Administrative Letter 2015-07.

State Farm and Equity were cited against the 1981 prototype. Root, Dairyland and Selective against the 2015 one. Root was founded in 2015 and failed against a template published the year it incorporated.

When the regulator supplies the content and companies still don’t ship it, the failure isn’t knowledge and it isn’t intent. There is simply no mechanism connecting a published requirement to a production artifact.

The remedy is the problem

Here is what regulators prescribe. Of Delaware’s eighteen recommendations to GEICO, sixteen were “provide additional training.” Two asked for anything structural: revise the form, and review the process by which one notice gets delivered on time.

Does training work? There is a control group.

Safety Insurance, Massachusetts. A 2018 examination found two failures: adverse action notices that couldn’t be verified as sent, and at-fault determinations not reported to the loss underwriting exchange. The company agreed to improved processes, staff and agent training, guidance, evidence retention, and an internal audit. It completed the audit.

The 2024 examination found the same two failures. Examiners pulled twelve applications declined for credit reasons: nine could not be verified as having received the required notice, and the other three went outside the ten-day window. Twelve out of twelve. Plus 545 unreported determinations.

The Division named the cause in one sentence: distribution had been delegated to selling agents without adequate monitoring. The settlement carries a $33,250 penalty, a re-examination within eighteen months, a three-percent error-rate threshold on a credible statistical sample, and a note that remediation costs cannot be recovered in rate filings.

USAA, Virginia. Examined as of August 2014 and again as of March 2020. Forty-eight statutes cited the first time, twenty-one the second — and sixteen cited in both. Six of those sixteen are notice provisions, including § 38.2-610 A, proof of mailing, and two cancellation-notice requirements. Six years apart.

Training is the intervention. Two carriers, two states, and it didn’t hold.

What I’m not claiming

Carriers fail examinations for reasons other than notices, and sometimes badly. Spinnaker drew 43 violations for unfiled rates and 148 for not using rates on file. State Farm drew 34 rating violations in Virginia. Erie drew 28. Anyone who reads these reports expecting pricing to be clean will be disappointed quickly.

The pattern isn’t universal either. USAA’s 2022 Virginia examination cites no adverse underwriting decision violation at all.

And exam scope shapes findings. A targeted claims examination finds claims problems; a comprehensive one finds notice problems. Counting exceptions across examinations with different scopes measures the examiners’ agenda, not the industry’s failures. That’s why the claim above is about breadth — how many carriers, on one provision, over how long — rather than a total. Totals in this material are fragile to counting method; the same finding is restated across Part One, the company’s rebuttal, and Part Three, and a naive count inflates by a third.

What this is really about

Every one of these notices exists because someone decided a person deserved to be told something at a moment that mattered. Declined. Canceled. Rated up. Denied. Out of time to appeal.

The industry has built the pricing engine, the underwriting model and the rating manual to a standard where manual re-rating produces zero exceptions. The message telling someone they’ve been refused is on a form last updated in 2014.

And the scale of that surface is not small. In 2025, statewide MCAS ratios show between 24% and 34% of all claims closing without payment across homeowners and private passenger auto in Massachusetts, Delaware and Virginia. Between 15% and 27% paid beyond sixty days. Roughly a third of the people who file are told no — and the telling is the part nobody owns.

NAIC MCAS scorecard data, 2025. The NAIC and individual states do not endorse any calculation or subsequent use of the MCAS scorecard data.

What a designed answer looks like

Not training. The two non-training recommendations in the GEICO report point at it directly: revise the form, and review the process by which the notice is delivered timely and consistently.

Three things, none of which are exotic:

Templates with owners and statutory dependencies. A notice form should know which statute it implements. When the statute amends, the form’s owner should hear about it that week — not from an examiner two years later.

Delivery evidence as a system output. “Proof of mailing could not be produced” appears in nearly every examination I read. That isn’t a records problem; it’s a design decision to treat evidence as something retrieved on request rather than emitted on send.

A view that shows whether the message went. Safety’s failure was delegation without visibility. When distribution is handed to agents, brokers, or a platform partner, someone needs a screen that shows which required notices went out, when, and to whom — the same way operations teams already track everything else that matters.

I spent five years building exactly that shape of tool in a different industry: work handed across parties, no unified view of whether it completed, and no ownership tag on the gap. The problem is not novel. It just hasn’t been treated as a design problem in insurance, because notices sit outside the surface product teams think of as the product.

Nineteen carriers, one notice, twelve years — and a prototype the regulator has been publishing since 1981.

The audit

The audit runs the same way: read what’s already in production, map each notice to the statute and the process behind it, and hand back a fix list sorted by who owns each row — not another training recommendation.

Book a Call