Consumer Protection, Data Protection and Professional Ethics in Insurance Distribution
Consumer protection
Insurance distribution is subject to the Consumer Protection Act and the Insurance Code’s conduct rules: fair treatment, clear pre-contract information (IPID, PRIIPs KID for investment products), demands-and-needs assessment, transparent complaints handling, and the 14-day cooling-off right for life and distance contracts. Unfair commercial practices and aggressive selling are prohibited; the FSC supervises market conduct.
Data protection
The GDPR and the Personal Data Protection Act apply. The intermediary must have a lawful basis (contract, legal obligation, consent where required), provide a privacy notice, minimise data, and respect data-subject rights (access, rectification, erasure, portability). Health data in life/health underwriting is special-category data requiring a specific legal basis and safeguards.
Professional ethics
Honesty, integrity, confidentiality, competence, and putting the client’s interest first. Conflicts must be disclosed; advice must be suitable; records must be kept.
Traps
- Assuming consent is always the lawful basis - contract or legal obligation often suffices.
- Forgetting that health data is special-category and needs extra protection.
- Confusing the cooling-off right (life/distance) with a general right to cancel any policy.
- Treating the privacy notice as optional - it is mandatory.
Worked example
A broker collects health information to arrange life cover. It must identify the legal basis (often the contract/underwriting necessity plus safeguards), provide the privacy notice, limit data to what is needed, and honour access/rectification requests. Rule of thumb: inform, minimise, secure, and respect rights.