Vicki Livingstone: Protection, privacy and penalties

As 25 May rapidly approaches, GDPR shines a spotlight on the risks insurers could be exposed to in protecting customers' data. The implications are clear: the potential size of a fine for a breach could be materially higher; there will be a mandatory requirement to notify the Information Commissioner's Office and the Data Subject of a breach; and there is an increased likelihood of a successful claim for damages being made by the Data Subject after any such breach. The ability to transfer an applicant's medical data electronically between insurer and GP already exists and provides a s...