Firms using GDPR as scapegoat for Consumer Duty failures: MorganAsh

Risking regulatory action

Cameron Roberts
clock • 2 min read

Support services provider, MorganAsh, has released a warning for firms using data protection laws as a reason to not comply with Consumer Duty.

The provider said that it has numerous anecdotes suggesting some firms are avoiding collecting and storing customer vulnerability data to avoid a conflict with GDPR, many firms reason that sanctions from the Financial Conduct Authority (FCA) will be less than those from the Information Commissioner's Office (ISO). The perceived conflict originates at retaining vulnerable customer data, GDPR requires firms to keep data accurately and safely, whereas Consumer Duty includes a requirement to monitor consumer vulnerability over the lifetime of a product. In a joint statement from the ICO a...

To continue reading this article...

Join COVER for free

  • Unlimited access to real-time news, key trend analysis and industry insights.
  • Stay on top of the latest developments around health and wellbeing, diversity and inclusion and the cost of living crisis.
  • Receive breaking news stories straight to your inbox in the daily newsletter.
  • Members only access to monthly programme 'The COVER Review'
  • Be the first to hear about our CPD accredited events and awards programmes.

Join now

 

Already a Cover member?

Login

More on Regulation

FCA publishes regulatory priorities for insurance

FCA publishes regulatory priorities for insurance

86% of consumers have at least one general insurance or pure protection product

Cameron Roberts
clock 24 February 2026 • 2 min read
IPT receipts hit £7.7bn in January 2026

IPT receipts hit £7.7bn in January 2026

£872m collected last month

Jaskeet Briah
clock 20 February 2026 • 2 min read
Rising IHT receipts hit £7.1bn

Rising IHT receipts hit £7.1bn

Experts note ‘fairly modest’ growth

Jen Frost
clock 20 February 2026 • 3 min read