Car Insurance - GDPR Violation?

GreaterAlb

Hi all,

I've recently taken out some car insurance which is due to start on 15/10/20. When taking out my insurance, I was subject to a whole host of questions which I answered, however a few days ago, the customer service department reached out in order to obtain some additional information.

As I hadn't previously been insured on the car I didn't think anything of some of the questions which one could argue were slightly intrusive. However today I received an email which I felt was unnecessary. The company reached out and requested that I provide documented proof of who is currently insured on the car and whether they will be insured until my insurance begins on 15/10/20. I confirmed that somebody is insured on the car and this can be verified by running the number plate through AskMID, however as the data requested is not mine, I am not comfortable in sharing this. I then received a response of them insisting that the document is provided regardless of whether the data is mine or not, or my policy could be cancelled.

Is anyone able to confirm whether the information requested is violating GDPR or a data privacy law, as I am not in the position to provide somebody else's documentation to a car insurance company who is only insuring me and not said person.

Many thanks

theoretica

Are you a business?  Private people are not covered as data holders by GDPR.

'Processing of personal data by a natural person in the course of a purely personal or household activity' is exempt.  Once you pass the data to the company what they can do with it is covered by GDPR.

dunstonh

 However today I received an email which I felt was unnecessary. The company reached out and requested that I provide documented proof of who is currently insured on the car and whether they will be insured until my insurance begins on 15/10/20.

Either you have been flagged for sample checking or sufficient risk flags have been raised to verify data.

 however as the data requested is not mine, I am not comfortable in sharing this. I then received a response of them insisting that the document is provided regardless of whether the data is mine or not, or my policy could be cancelled.

That is a correct response.  These questions are not asked just to waste everyone's time.

Is anyone able to confirm whether the information requested is violating GDPR or a data privacy law, as I am not in the position to provide somebody else's documentation to a car insurance company who is only insuring me and not said person.

GDPR does not apply to you.

Barny1979

"reached out" *shudders*

davidmcn

Barny1979 said:

"reached out" *shudders*

It always makes me think of this:

Ditzy_Mitzy

Barny1979 said:

"reached out" *shudders*

The only acceptable users of the expression 'reach out' are the Four Tops, Gloria Gaynor and Depeche Mode.  
To answer the question: GDPR doesn't apply to a private individual.  I wonder if the information is being requested because the car is showing as uninsured, presently, on the system and the new insurer wants to make sure it's fulfilled its requirements under continuous insurance.  

Jumblebumble

I suppose it never occurs to you that the insurance company are probably fully aware of who is likely to be insured but are double checking and your absurd lack of cooperation is naturally raising their suspicions.
Askmid is just a guide in any event and does not provide 100% real time definitive answers

TheStoozeFather

GreaterAlb said:

Hi all,

I've recently taken out some car insurance which is due to start on 15/10/20. When taking out my insurance, I was subject to a whole host of questions which I answered, however a few days ago, the customer service department reached out in order to obtain some additional information.

As I hadn't previously been insured on the car I didn't think anything of some of the questions which one could argue were slightly intrusive. However today I received an email which I felt was unnecessary. The company reached out and requested that I provide documented proof of who is currently insured on the car and whether they will be insured until my insurance begins on 15/10/20. I confirmed that somebody is insured on the car and this can be verified by running the number plate through AskMID, however as the data requested is not mine, I am not comfortable in sharing this. I then received a response of them insisting that the document is provided regardless of whether the data is mine or not, or my policy could be cancelled.

Is anyone able to confirm whether the information requested is violating GDPR or a data privacy law, as I am not in the position to provide somebody else's documentation to a car insurance company who is only insuring me and not said person.

Many thanks

I'm with the OP here; there's no reason for the insurer to need to know this. If it was proof of NCD or similar relating to the OP's policy, that would've made more sense.

rudekid48

TheStoozeFather said:
I'm with the OP here; there's no reason for the insurer to need to know this. If it was proof of NCD or similar relating to the OP's policy, that would've made more sense.

I can see a very good reason - OP says that they have never been insured on the car before but they don't say if they have declared themselves as the registered keeper and/or owner, or how long they have had the vehicle for.  If, for example, the OP has owned the vehicle for a few years (as the RK) but it has always been (and still is) insured in someone else's name, then it is a valid question.  If on the other hand the OP has just bought the vehicle and so the previous owner would have been the policyholder until now, then I would agree that the insurer doesn't need to know.  There is more to this situation than the OP has disclosed here....

tim_london

Insurance has the right to know to underwrite the policy.  In this case I’m guessing they sense a risk that you had multiple drivers on current policy and is trying to wiggle out a few quid by omitting the details on the new one.

It is only a violation of GDPR if they collected the data and let a computer program decide whether you are eligible or not.  As long it is used by a fair process, ie a trained human underwriter then it is ok.

If their legal did their job properly, they should have mentioned somewhere that “you” need to have obtained consent from the people you are describing in the response.

DCFC79

Just provide whats asked for.
If your not happy find another insurer.