GDPR and Insurance
Author
Discussion

stevesingo

Original Poster:

5,044 posts

252 months

Friday 1st June 2018
quotequote all
When shopping for insurance quotes we pass on loads of info which is now "protected" by GDPR. The insurance companies pass this amongst themselves for the purposes of fraud protection etc. I believe the sharing of such information is via certain databases, so the question is; who are these faceless data handling companies and how can they be contacted to make a GDPR request?

Additionally, if a customer removes consent to use their information, what would the insurance company be able to do about it?

Camelot1971

2,854 posts

196 months

Friday 1st June 2018
quotequote all
Ask the company YOU gave your data to what they do with it. It should be on the website. If you don't agree, for example, with a comparison website processing and using your data, don't use the website.

A firm can keep your data regardless of what you ask if they have a legitimate reason for doing so. Fraud prevention is a legitimate reason.

If you wanted your data deleted from that S&M online store you buy all your whips and chains from, that should be more straightforward.

ZOLLAR

19,920 posts

203 months

Friday 1st June 2018
quotequote all
stevesingo said:
When shopping for insurance quotes we pass on loads of info which is now "protected" by GDPR. The insurance companies pass this amongst themselves for the purposes of fraud protection etc. I believe the sharing of such information is via certain databases, so the question is; who are these faceless data handling companies and how can they be contacted to make a GDPR request?

Additionally, if a customer removes consent to use their information, what would the insurance company be able to do about it?
There are exemptions in relation to fraud prevention under GDPR and DPA18.

As long as the insurer can justify the requirement to share the information then there's no issue, naturally as it's your data you can send your request to the insurer and ask them any questions you have about the use of your information and it'll be reviewed.

BertBert

21,272 posts

241 months

Friday 1st June 2018
quotequote all
How far do the exemptions go? For example could I get all my personal data removed under GDPR from the shared databases?

stevesingo

Original Poster:

5,044 posts

252 months

Friday 1st June 2018
quotequote all
Thanks for the replies. I'm aware of those points.

My question is, the data which is held by industry databases such as CUE, MIAFTR, CIFAS (referenced here https://www.pistonheads.com/gassing/topic.asp?h=0&... ) is presumably under the same law. I don't recall any communication from them, as I have received from just about every other organisation which holds my data, stating the change of the law and how this effects how they handle my data.

When I go to the MIB I get access to this https://www.mib.org.uk/media/416478/data-subject-a... which allows a request for info.

It does explicitly state that "this request will not return any information relating to your motor insurance policy, claims made to MIB, written-off vehicles or ‘No Claims Discounts".

Why is that?

williamp

20,415 posts

303 months

Friday 1st June 2018
quotequote all
It depends. If they need the data as a legal obligation, then no. If it was another bad is, then yes. Their privacy notice should explain

stevesingo

Original Poster:

5,044 posts

252 months

Friday 1st June 2018
quotequote all
I would not be asking them to delete the data, only to view it. Why would they prevent that?

BertBert

21,272 posts

241 months

Friday 1st June 2018
quotequote all
I think with a contractual relationship with my insurer, they didn't need to contact me regarding GDPR.

However I don't have a contractual relationship with the 'shared' databases. I've not given my permission for anything to be shared.

Bert

Gavia

7,627 posts

121 months

Friday 1st June 2018
quotequote all
stevesingo said:
I would not be asking them to delete the data, only to view it. Why would they prevent that?
They aren’t. Why do you think they’re blocking it?

stevesingo

Original Poster:

5,044 posts

252 months

Friday 1st June 2018
quotequote all
The MIB data request form https://www.mib.org.uk/media/416478/data-subject-a... which allows a request for info.

states that "this request will not return any information relating to your motor insurance policy, claims made to MIB, written-off vehicles or ‘No Claims Discounts".

Gavia

7,627 posts

121 months

Friday 1st June 2018
quotequote all
stevesingo said:
The MIB data request form https://www.mib.org.uk/media/416478/data-subject-a... which allows a request for info.

states that "this request will not return any information relating to your motor insurance policy, claims made to MIB, written-off vehicles or ‘No Claims Discounts".
Your motor policy details are held with your insurer, the only thing that MID (not MIB) hold is the policy numenr, inception date, what car it covers and who it's with amd little else. Contact your insurer for that info.

Claims made to MIB, either you’ve made the claim so know all about it, or someone else is making a claim against you. If they were doing that then they wouldn’t be using the MIB, they’d be pursuing your own insurer, so irrelevant. Contact your own insurer.

Written off vehicles are not personal info, nor are the details stored by the MIB. Do an HPI check, which draws its data from MIAFTR

Your NCD isn’t held centrally only with your insurer



stevesingo

Original Poster:

5,044 posts

252 months

Friday 1st June 2018
quotequote all
Well, I've made a request. It will be interesting as to what comes back.