Why data matters in insurance
Insurers use data throughout their relationship with customers, from developing products and providing cover to processing claims and detecting fraud. As digital technologies and artificial intelligence develop, data can also support better risk prevention, more efficient services and innovation.
EU rules require insurers to use personal data fairly and transparently, collect only the data they need for a clear purpose and put appropriate safeguards in place. These protections apply whenever personal data is collected, used or shared.
For more on how insurers use risk information when underwriting insurance, see our page on risk-based underwriting.
The EU data protection framework
The General Data Protection Regulation (GDPR) provides the main framework for protecting personal data in the EU. It requires organisations to use personal data fairly, and respect people’s rights over how their data is used.
For insurers, the GDPR operates alongside other EU rules on data and digital technologies, including the AI Act and insurance-specific legislation. Together, these rules provide important protections for consumers, but their interaction can also create complexity and uncertainty.
A clear and workable data protection framework
Insurance Europe supports a data protection framework that combines strong protection for individuals with clear and practical rules for organisations. As technology develops, greater legal certainty is important to ensure that insurers can use data responsibly and continue to innovate.
The EU’s Digital Omnibus is an opportunity to clarify key parts of the GDPR without weakening existing protections. Insurance Europe supports clearer rules in areas such as the definition of personal data, automated decision-making and the use of data for AI training, as well as a more practical approach to requirements such as data-breach reporting.
The aim should be a framework that protects people, gives organisations clear rules to follow and supports the responsible use of data and innovation.
Understanding your rights and responsibilities under the GDPR
Can consumers ask what personal data an insurer holds about them? Can they have inaccurate information corrected or ask for data to be deleted? And what responsibilities do insurers have when collecting, storing and using personal data?
These two practical infographics explain the GDPR from both sides of the relationship: the rights it gives consumers and the key responsibilities it places on insurers.
Publications
Contacts