Starting October 1, 2026, Alabama health plans using AI for advance care approvals must consider each enrollee’s clinical information, and professionals must review certain adverse decisions.
When a health plan uses AI to decide whether to approve care in advance, it must consider the enrollee’s medical history and other relevant clinical information.
Plans using AI to review requests for advance approval must disclose that use, check its accuracy and fairness, limit how patient data is used, and certify their practices each year.
The Insurance Department may investigate violations and require plans to correct their procedures; repeated violations that show a business pattern may also bring fines or loss of authority to operate.
Plans using AI for medical-need decisions must consider each enrollee’s clinical information. The decision must consider the enrollee’s medical history, circumstances described by the requesting health care provider, and other clinical information in the enrollee’s medical record. This applies when a plan provider uses AI to decide whether care is medically necessary for prior authorization, or advance approval.
Plans using AI in coverage reviews must disclose and check that use, protect patient data, and certify their practices each year. These requirements apply to health plan providers that use AI to review requests for advance approval. The yearly certification must cover the use of individual rather than group data, fair treatment, and compliance with laws against discrimination. An authorized representative may attest based on reasonable reliance on the plan’s policies and procedures and its outside vendors. Patient data must not be used beyond its stated purpose, consistent with HIPAA. The certification is required annually.
The Insurance Department may investigate violations and require plans to correct their procedures. Enforcement covers violations of the AI decision requirements, including decisions made without considering an enrollee’s medical history and relevant clinical circumstances. The department may ask a plan to respond within 30 days and may hold a hearing if it finds the response unsatisfactory. For repeat violations frequent enough to show a general business pattern or practice, the department may also impose a fine of up to $5,000, suspend or revoke the plan provider’s authority, or do both. The law takes effect October 1, 2026.
No hearings or votes scheduled.