European Insurers Cite Compliance Woes Under EU Privacy Law

European insurers are having a hard time updating information technology systems to comply with principles of the EU’s General Data Protection Regulation, a group representing national insurance associations said.

Insurers reported issues in classifying suppliers as either controllers or processors and allocating controller and processor liability, Insurance Europe said in its response to a European Commission questionnaire on the application of the General Data Protection Regulation. The group also cited GDPR requirements for automated data deletion.

Innovation is “slowed down” because of the need to integrate GDPR requirements in the process, insurers told the group. “The implementation of data minimization ...