--- title: "GDPR: What's in store for insurance?" description: Elaine Morrissey looks at how EU General Data Protection Regulation (GDPR) will impact the insurance industry when it comes into force in May 2018. image: https://blog.iii.ie/hubfs/Blog/Industry%20Insights/IndustryInsights_GDPR-1.png --- [![logo-from-updated-site](https://blog.iii.ie/hs-fs/hubfs/Logos/Insurance%20Institute/logo-from-updated-site.png?width=178&name=logo-from-updated-site.png)](http://www.iii.ie/) [**MEMBER LOGIN**](https://eu-quercus.elluciancloud.com/app/iii/f?p=10604:101:3609409149439) - [Programmes](https://iii.ie/Programmes) - [Certificate in Product Advice](https://iii.ie/Programmes/Certificate-in-Insurance-Product-Advice-APA) - [Certificate in Insurance Practice](https://iii.ie/Programmes/Certificate-in-Insurance-Practice-CIP) - [Higher Diploma in Insurance Management](https://iii.ie/Programmes/Higher-Diploma-in-Insurance-Management) - [Specialty Programmes](https://iii.ie/Programmes/Specialty-Programmes) - [Insurance Practitioner Apprenticeship](https://iii.ie/Programmes/Specialty-Programmes/Insurance-Practitioner-Apprenticeship) - [Certified Insurance Director](https://iii.ie/Programmes/Specialty-Programmes/Certified-Insurance-Director) - [Certificate in Climate Risk](https://iii.ie/Programmes/Specialty-Programmes/Certificate-in-Climate-Risk) - [Micro-credentials](https://iii.ie/Programmes/Specialty-Programmes/Micro-credentials) - [Affiliate Programmes](https://iii.ie/Programmes/Affiliate-Programmes) - [Non-General Insurance Qualifications](https://iii.ie/Programmes/Affiliate-Programmes#non-general-insurance-qualifications) - [Certified Diploma in Loss Adjusting](https://iii.ie/Programmes/Affiliate-Programmes#cdip) - [ACII to FCII](https://iii.ie/Programmes/Affiliate-Programmes#acii-and-fcii) - [Exemptions](https://iii.ie/Programmes/Exemptions) - [Exams](https://iii.ie/Programmes/Exam-Information) - [Membership](https://iii.ie/Membership) - [Membership Categories and Fees](https://iii.ie/Membership/Membership-Categories-Fees) - [CPD](https://iii.ie/Membership/CPD) - [Local Institutes](https://iii.ie/Membership/Local-Institutes) - [Careers](https://iii.ie/Membership/Careers) - [Register of Compliant Persons](https://iii.ie/Membership/Register-of-Compliant-Persons) - [Employers](https://iii.ie/Employers) - [About Us](https://iii.ie/About-Us) - [Our History](https://iii.ie/About-Us/Our-History) - [Leadership Team](https://iii.ie/About-Us/Leadership) - [Blog](https://blog.iii.ie/inside-track) ![Blog Banner 2](https://blog.iii.ie/hubfs/Blog%20Banner%202.png "Blog Banner 2") # GDPR: What's in store for insurance? 04/07/17 09:00 / by [The Insurance Institute](https://blog.iii.ie/inside-track/author/the-insurance-institute) ![The Insurance Institute](https://blog.iii.ie/hubfs/TII_Simpl_Horiz_Blue_Favicon.ico) ![IndustryInsights_GDPR-1.png](https://blog.iii.ie/hs-fs/hubfs/Blog/Industry%20Insights/IndustryInsights_GDPR-1.png?width=1024&name=IndustryInsights_GDPR-1.png) In the second issue of our member magazine, The Insider, Elaine Morrissey (Associate Solicitor at McDowell Purcell) looks at how EU General Data Protection Regulation (GDPR) will impact the insurance industry when it comes into force in May 2018. ---   The General Data Protection Regulation (GDPR) replaces the European Directive on data protection, which was transposed into Irish law by the Data Protection Acts 1988-2003. This Directive, due to the changing nature of business and technology, was no longer fit for purpose. After years of negotiations the GDPR was agreed on and is enforceable from 25 May 2018. This lead in time is necessary due to the complexity of the legislation and the challenges that organisations will face in being compliant. The aim of the GDPR is to have a **harmonised rule book** for all data subjects and organisations, with a key focus on strengthening the rights of data subjects in relation to their personal data. The GDPR applies across all business types and to both public and private sectors. As a Regulation it is directly applicable – that is, it does not need local legislation for it to be enforceable. However local legislation, the Data Protection Bill, due to be published in the autumn, aims to assist with the implementation of the GDPR and fill in the gaps that exist for Ireland. Both pieces of legislation will have to be considered when seeking to ensure compliance.    ### How will the GDPR impact the insurance industry? The GDPR has an immediate and direct impact on the insurance industry. The reforms include: - Administration Fines - Right to Compensation - New Processing and Consent Rules - Data Processor Obligations - Data Controller/Data Processor Contracts - New Rules for Data Access Requests - The Right to be Forgotten - Data Protection Officers - Codes of Conduct - Data Breach Notification Obligations - Data Transfers - Privacy Impact Assessments This article will highlight the following key changes: - Liability for breaches of the GDPR (administration fines and compensation) - Data access requests - Right to be forgotten - Codes of conduct - Processing of personal data relating to criminal convictions and offences --- [**Log in**](https://info.iii.ie/issue-2-the-insider) to access the rest of this article in our magazine, The Insider. [![Cover.png](https://blog.iii.ie/hs-fs/hubfs/The%20Insider/Cover.png?width=250&name=Cover.png "Cover.png")](https://info.iii.ie/issue-2-the-insider) The Insurance Institute of Ireland Insurance Centre, 5 Harbourmaster Place IFSC, Dublin 1, D01 E7E8 01 645 6600 | [info@iii.ie](mailto:info@iii.ie) The Insurance Institute of Ireland is registered in Ireland. No. 518942 and is a company limited by guarantee, with permission to omit the suffix 'CLG' from its name. - ![Education Awards 2018](https://www.iii.ie/upload/frontpage/award-1.png) - ![bgr](https://blog.iii.ie/hubfs/TheInsuranceInstitute%20-June2017%20/images/iso-9001.png) - [ABOUT](https://www.iii.ie/about/) - [MEMBERSHIP T&Cs](https://www.iii.ie/about/membership-terms-and-conditions) - [CODE OF ETHICS & CONDUCT](https://www.iii.ie/about/code-of-ethics) - [DATA PROTECTION & PRIVACY POLICY](https://www.iii.ie/about/data-protection-and-privacy-policy) - [USEFUL DOCUMENTS](https://www.iii.ie/exams/useful-documents) - [WEBSITE TERMS OF USE](https://www.iii.ie/about/website-terms-of-use) - [COOKIES NOTICE](https://www.iii.ie/about/cookies-notice) - - - - ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "The Insurance Institute", "url" : "https://blog.iii.ie/inside-track/author/the-insurance-institute" }, "datePublished" : "2017-07-04T08:00:00.000Z", "headline" : "GDPR: What's in store for insurance?", "image" : [ "https://blog.iii.ie/hubfs/Blog/Industry%20Insights/IndustryInsights_GDPR-1.png" ], "mainEntityOfPage" : { "@id" : "https://blog.iii.ie/inside-track/gdpr-whats-in-store-for-insurance", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.iii.ie/hubfs/Logos/logo-from-updated-site.png" }, "name" : "The Insurance Institute" } } ```