General Insurance Article - A review of the insurability of GDPR fines across Europe


Aon and DLA Piper have launched a guide ‘The price of data security’, ahead of the General Data Protection Regulation (GDPR), effective from 25 May 2018.

 The guide reviews the insurability of GDPR fines across Europe, which can reach up to €20 million or, if higher, up to 4% of a group's annual global turnover. It also looks at insurability of costs associated with GDPR non-compliance (e.g. litigation, investigation and compensation), as well as the insurability of non-GDPR regulatory fines.

 The guide highlights that there are currently only a few jurisdictions in Europe where civil fines can be covered by insurance and, even then, there must be no deliberate wrongdoing or gross negligence on the part of the insured. Criminal penalties are almost never insurable. GDPR administrative fines are civil in nature, but the GDPR also allows European Member States to impose their own penalties for personal data violations.

 Key findings include:

 GDPR fines were found to be insurable in only two of the countries reviewed – Finland and Norway;
 In 20 out of 30 reviewed jurisdictions GDPR fines would generally not be regarded as insurable, including the UK, France, Italy and Spain;

 In eight of the jurisdictions it is unclear whether GDPR fines would be insurable. In these jurisdictions specific details around individual cases, for example the conduct of the insured and whether the fine is classed as criminal, will need to be considered.

 Whilst the insurability of GDPR fines may be limited, insurance forms a key component of an organisation’s risk management strategy to manage costs associated with GDPR non-compliance and resulting business disruption losses. Such costs could include legal fees and litigation, regulatory investigation, remediation and other costs associated with compensation and notification to impacted data subjects.

 Vanessa Leemans, Chief Commercial Officer, Aon Cyber Solutions EMEA commented: “GDPR will expose organisations to significantly higher risks related to how they manage and store personal data. Data breaches, and other cyber events, could see businesses face both major fines and extensive costs. It is therefore essential that organisations fully understand where their exposures lie. They should work closely with their insurance partners to ensure they have an appropriate risk transfer solution and incident response plan in place.”

 Organisations may also face damage to both their reputation and market position if impacted by a high-profile data breach.

 Prakash (PK) Paran, Partner and Co-Chair, Global Insurance Sector at DLA Piper added: "While there are only a few jurisdictions where GDPR fines are insurable, insurance against legal costs and liabilities following a data breach is widely available across Europe and may provide valuable cover to organisations. However, corporate groups still need to consider reputational damage and impact on existing customers, the wider market, and their relationships with regulators, all of which may go beyond quantifiable financial losses. Prevention is better than the cure."
  
 To download the full report ‘The price of data security: A guide to the insurability of GDPR fines across Europe’ click here

Back to Index


Similar News to this Story

Reputation events twice as costly since rise of social media
According to the findings of a new report released today by Pentland Analytics with Aon, reputation events, such as cyber attacks, have a direct impac
Canadian employers feel prepared for cannabis legalisation
Mercer has announced the findings of a survey examining how its clients in Canada are dealing with the impending legalization of recreational cannabis
Catastrophes cause global economic losses of USD 36 billion
According to Swiss Re Institute's preliminary sigma estimates, global economic losses from natural catastrophes and man-made disasters in the fir

Site Search

Exact   Any  

Latest Actuarial Jobs

Actuarial Login

Email
Password
 Jobseeker    Client
Reminder Logon

APA Sponsors

Actuarial Jobs & News Feeds

Jobs RSS News RSS

WikiActuary

Be the first to contribute to our definitive actuarial reference forum. Built by actuaries for actuaries.