Direct answer: under ICOBS 6.1 of the FCA Handbook, a firm must give a customer **appropriate information** about a policy **in good time** and in a comprehensible form so they can make an informed decision — including when the policy is offered **with other goods or services** (a holiday, flight, or hotel basket counts). For consumers, that includes providing **IPID information by way of an Insurance Product Information Document** for each non-pure-protection policy on paper or another **durable medium** (ICOBS 6.1.10A–10B; content and format in ICOBS 6 Annex 3). Where travel insurance is bought **in connection with** other goods or services, ICOBS 6.1.13R also requires the firm to disclose the **premium separately** from other prices and whether buying the policy is **compulsory**, before conclusion. Optional paid add-ons cannot be sold on an **opt-out** basis: ICOBS 6A.2 requires the customer to **actively elect** the specific product. An AI checkout or upsell agent that pre-ticks cover, buries premium in a package total, or completes sale before the manufacturer IPID is delivered is not “personalisation”. It is an ICOBS product-information and add-on control failure.
That is the operator question Kaize is answering here. We are a UK AI product studio for travel and hospitality. This is **not legal advice**, not a permissions map for your firm’s FCA permissions, and not a substitute for the live Handbook text, your insurance distribution agreements, appointed-representative oversight, or counsel. It is a **control-stack** article: what must already be true in the booking and insurance state machine before AI is allowed to sell or attach travel cover. It sits beside — and does not replace — our CCR 2013 pre-contract information gates (**before AI completes a distance sale**), our PCI DSS cardholder-data controls (**before AI handles cards**), our Consumer Rights Act unfair-terms notice framing, and our ATOL Certificate controls before first payment. This article is narrower: **FCA IPID and ICOBS add-on readiness must be encoded before AI may sell travel insurance at checkout**.
Why generative checkout keeps colliding with ICOBS 6 and 6A
Most tour operators and OTAs already know travel insurance is a regulated distribution problem when they hold the right permissions — or when an insurer/intermediary partner does. The 2026 failure mode is a **generative basket assistant** that can summarise “protection options”, invent a one-line benefit blurb, pre-select cover to raise attach rate, and take payment **without** proving that the manufacturer IPID exists as a durable-medium artefact for **that** policy, that appropriate information (including medical-condition exclusion messaging for travel policies under ICOBS 6.1 guidance) was given in good time, that premium and compulsoriness were disclosed separately, that the customer **actively elected** the optional product (ICOBS 6A.2), and that cross-selling disclosures under ICOBS 6A.3 were met where insurance sits with non-insurance travel services. PS15/22 still frames the commercial temptation: add-ons sold with weak product information and opt-out patterns.
Four Handbook facts teams must encode before any auto-upsell or “recommended cover” tool is armed on UK retail travel insurance:
- **Appropriate information in good time** — ICOBS 6.1.5R: informed decision before conclusion; applies whether or not a recommendation is given, and whether the policy is alone or packaged with travel services.
- **IPID per policy on a durable medium** — ICOBS 6.1.10AR/10BR + Annex 3: consumers get IPID information via a stand-alone IPID for each policy (including add-ons sold with holidays); manufacturer draws it up; content covers type, insured risks, exclusions, obligations, payment, term, cancellation.
- **Separate premium + compulsoriness for packaged sales** — ICOBS 6.1.13R: before conclusion, disclose premium separately and whether buying the policy is compulsory when bought with other goods/services.
- **Active election; no opt-out add-ons** — ICOBS 6A.2: no chargeable optional additional product unless the customer actively elects that specific product; silence/pre-tick is not election.
Map the duty before the model speaks
ICOBS is not a prompt tip to “mention cancellation cover politely”. Your insurance-upsell agent needs structured fields for: whether the session is distributing a regulated insurance product; which manufacturer policy/product code is offered; IPID document URI and durable-medium delivery proof; separate premium amount and currency; compulsoriness flag; active-election timestamp and UI control id (not a defaulted boolean); demands-and-needs / eligibility hooks where your permissions require them (ICOBS 5 territory — encode as hard stops when required); travel medical-condition exclusion disclosures when quoting travel cover; and cross-sell component pricing where ICOBS 6A.3 applies. Those fields must be **sourced from insurer/intermediary product systems and compliance artefacts**, not invented in chat. A model that “summarises” cover from marketing copy without the manufacturer IPID is inventing product information the Handbook does not treat as appropriate.
The six gates before AI may sell or attach travel insurance
Gate 1 — Confirm distribution role, product identity, and manufacturer IPID artefact
Before any generative turn offers “add travel insurance for £X”, classify whether your firm (or AR) is distributing a regulated insurance product and load the **specific** policy the manufacturer has productised. Gate 1 fails if the assistant invents a generic “holiday cover” SKU, or if the IPID for that policy is missing, stale, or only available as a post-sale PDF the model promises to “send later” while payment already runs.
Gate 2 — Deliver appropriate information and the IPID in good time on a durable medium
ICOBS 6.1.5R and the IPID rules require information **before** conclusion (with limited telephone-sale timing nuances in the Handbook — do not invent a loophole in chat). Gate 2 fails if the agent can complete sale while the IPID is still a broken link, a marketing webpage that is not the stand-alone IPID, or a model paraphrase of benefits that replaces Annex 3 content.
Gate 3 — Separate premium disclosure and compulsoriness when sold with travel
ICOBS 6.1.13R is explicit for consumer policies bought with other goods or services. Gate 3 fails if insurance premium is only visible inside a blended “total trip” figure, or if the UI never states whether cover is optional or compulsory.
Gate 4 — Active election; block opt-out, pre-tick, and silence-as-consent patterns
ICOBS 6A.2 requires active election of the specific optional product before charge. Gate 4 fails if defaults are true, if “recommended” bundles auto-include cover, or if a generative agent treats a skipped clarification as assent. Build an explicit opt-in control id into the booking state; null election blocks attach and payment for that component.
Gate 5 — Travel-specific medical exclusion and directory messaging when quoting
When providing a quotation for a travel insurance policy (or eligibility information), ICOBS 6.1 guidance on medical condition exclusions expects disclosure of whether medical exclusions can be removed and on what terms; ICOBS 6A.4 adds medical cover firm directory obligations for firms marketing travel insurance online. Gate 5 fails if the model answers “you’re covered for pre-existing conditions” from vibes, or if the marketing site omits directory details the rules require.
Gate 6 — Cross-sell packaging, demands-and-needs, and adjacent travel controls stay armed
Where insurance is ancillary to travel services (or vice versa), ICOBS 6A.3 cross-selling rules still apply alongside price disclosure and optional-product rules. Demands-and-needs consistency (ICOBS 5) remains a hard stop where your permissions require it — encode it; do not let the model “skip advice” by calling itself a chatbot. Insurance attach does not replace CCR pre-contract gates, PCI DSS checkout controls, ATOL Certificate before first payment, DMCC drip-pricing totals, or the prepare-vs-human-confirm rule for high-impact money and regulated product moves. Gate 6 fails if teams treat an IPID PDF as the only checklist.
What this is not
- Not CCR 2013 pre-contract information before AI completes a UK distance sale — that article is general distance-sale consumer information; this one is **FCA insurance product information / IPID / add-on election**.
- Not PCI DSS AI travel checkout cardholder-data controls — card data security; complementary when premium is taken, not a substitute for ICOBS disclosure.
- Not ATOL Certificate before AI takes payment — flight-inclusive package protection artefact; insurance add-ons sit on a different regulatory stack.
- Not DMCC drip-pricing quote totals — total-price presentation for travel quotes; ICOBS still requires **separate insurance premium** disclosure when cover is sold with the trip.
- Not a PTR price/cancellation/transfer gate — this article deliberately diversifies into **insurance distribution** controls for AI-assisted attach rates.
Operator checklist before go-live
- Product catalogue maps each offered travel insurance SKU to manufacturer, FRN/permissions path, and current IPID artefact URI; missing IPID blocks AI offer.
- Checkout/upsell agent cannot complete insurance attach until durable-medium IPID delivery is recorded for that session.
- Premium is shown as a separate line item; compulsoriness flag is explicit; blended-only totals hard-fail for the insurance component.
- Optional cover defaults to unselected; active election control id + timestamp required before charge; pre-tick and silence paths disabled.
- Travel quote path includes medical-condition exclusion disclosure hooks and, where marketing travel insurance online, ICOBS 6A.4 directory details on the relevant page.
- Cross-sell packages expose component costs per ICOBS 6A.3; non-insurance trip can be bought without insurance where the rule requires that option.
- Demands-and-needs / eligibility hard stops remain where permissions require them; model may prepare explanations, not waive advice rules by rebranding as “content”.
- Human confirm remains mandatory when product identity, IPID version, or election state is ambiguous.
- Change control: no new AI insurance channel without repeating Gates 1–6; CCR/PCI/ATOL/DMCC adjacent gates stay armed.
How Kaize frames the build
Kaize designs travel and hospitality AI so **control planes sit in front of models**. FCA IPID and ICOBS add-on readiness is one of those gates: the sell-and-attach path does not call “add travel insurance” until product identity, durable-medium IPID delivery, separate premium/compulsoriness disclosure, active election, and travel-specific medical messaging hooks are live on the session — just as we refuse distance-sale completion until CCR pre-contract information is encoded, refuse card handling until PCI DSS controls pass, or refuse first payment on ATOL product until certificate controls pass. If you want that control stack designed around your booking journey, insurer feeds and distribution permissions, discuss a project or see what we build and how travel companies should control AI agents.
Sources for operators to read next: ICOBS 6.1 — providing product information; ICOBS 6 Annex 3 — IPID content and format; ICOBS 6A.2 — optional additional products (active election); ICOBS 6A.3 — cross-selling; ICOBS 6A.4 — travel insurance and medical conditions; PS15/22 GI add-ons expectations and case studies (PDF). Always verify against the consolidated Handbook, your permissions and your counsel — this page is an operator control framing, not advice.