Jurisdiction(s):
United Kingdom

Related legal acts

Key definition

DPA definition

What does DPA mean? In legal practice, DPA is an abbreviation used in two main senses: the data protection Act or a deferred prosecution agreement; the intended meaning depends on context. Data Protection Act: In the UK, DPA typically means the Data Protection Act 2018, which, together with the UK GDPR, replaced the data protection act 1998 and regulates the lawful processing of personal data. In Ireland, it usually refers to the Data Protection Act 2018, which implements and supplements the EU GDPR. These Acts are statutory and set out duties for controllers and processors, data subject rights, accountability and transparency requirements,...

Insurers’ data protection compliance under UK GDPR, DPA 2018 and DUAA 2025 reforms: principles, lawful bases, special category/criminal data, research, automated decision-making, data subject rights, notices and exemptions

Published by a LexisNexis Insurance & Reinsurance expert

Practice notes

IMPORTANT NOTE:

The provisions of the data (Use and Access) act 2025 (DUAA 2025) are being introduced in stages. You should therefore check whether the specific provision in question has been commenced by the relevant commencement regulation.

This Practice Note outlines the core data protection considerations for insurers when handling personal data under the UK General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR), the Data Protection Act 2018 (dpa 2018) and DUAA 2025. It highlights the data protection principles, lawful bases for processing, data subject rights and applicable exemptions. For a fuller overview of the UK GDPR, see Practice Note: The UK General Data Protection Regulation (UK GDPR).

The insurance market is notably rich in data. Insurers depend on collecting and processing personal data for key operations such as pricing premiums, detecting fraud and administering claims. Nevertheless, the sector’s complexity and, in particular, its distribution chains can create practical difficulties in complying with data protection duties.

Data protection principles

All controllers must comply with the data protection principles. For a complete overview, see Practice Note: Data protection principles. The following principles may raise specific challenges for insurers...

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Jade Kowalski

DAC Beachcroft

Jade is a specialist data protection lawyer who advises clients across a number of different sectors. She advises on the full range of data protection issues such as complex data sharing arrangements, the use of cookies, marketing and the use of artificial intelligence. She is known for her practical, pragmatic approach to managing risk and ability to digest complex data protection issues into accessible, commercial advice.Her full service practice includes:Undertaking fully outsourced data protection compliance reviews;Handling complex data subject requests;Responding to and defending ICO investigations;Designing appropriate data protection frameworks and accompanying policies and procedures; andProviding strategic advice on data protection risk appetite and tolerance.Jade has particular experience and expertise in advising clients in the insurance industry. She is a trusted adviser to clients across the sector including (re)insurers, brokers and industry bodies. Having spent a number of years on client...

Web page updated on 21/05/2026

Popular documents

Using the Judicial College Guidelines to assess general damages in personal injury claims

When evaluating a general damages claim, the practitioner ought initially to refer to the Judicial College Guidelines (JCG)...

Tomlin orders in England and Wales: CPR guidance on drafting, confidentiality, approval, variation, enforcement, limitation, CCA issues, court-specific requirements, sample wording and precedents

This Practice Note This Practice Note reviews mechanisms used in settling litigation. A Tomlin order consists of a consent order paired with a schedule. It operates to stay proceedings on terms that have been agreed. The provisions contained in the schedule may remain confidential. This Practice Note describes the scope of confidentiality attaching to the schedule and sets out how it differs from a standard consent order. Sample wording for a Tomlin order is included, alongside links to precedents, as well as guidance on court approval. It also addresses varying, setting aside and enforcing a Tomlin order, including the considerations the court will take into account when handling applications for each. Further guidance is provided on interpreting and applying the relevant provisions of the CPR; however, some courts and divisions impose very specific requirements for both drafting and approval, and for approaching the schedule and confidentiality issues. Accordingly, you must consider the particular rules and court guide provisions in the forum where your claim is proceeding when drawing up the Tomlin order...

Precedent: Deed of Surrender of Lease with Optional Premium, Settlement and Release, Landlord, Mortgagee and Guarantor Consents, Reimbursement and HM Land Registry Provisions (England and Wales)

Date [ date ] Parties [ name of Landlord ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Landlord) [ name of Tenant ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Tenant) [ [ name of Guarantor ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Guarantor) ] [ [ name of Mortgagee ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Mortgagee) ] Definitions Within this Deed, the terms below shall be interpreted as follows: [ Annual Rent • the annual sum reserved under the Lease; ] [ Insurance Rent • the Tenant’s share of the Landlord’s costs of insuring the Property (as set out in the Lease); ] Lease • the lease of the Property dated [ date ], entered into between (1) [ the Landlord OR [ name ...

Precedent Statutory Declaration: Standard Wording under the Statutory Declarations Act 1835

I, [ name ], of [ address ], solemnly and sincerely state that: [ Matters to be verified, set out in numbered paragraphs ] I make this solemn statement in good conscience, believing it to be true, and pursuant to the provisions of the Statutory Declarations Act 1835. DECLARED at [ details ] this [ day ] day of [ month and year ] Before me ................................................................................ [ signature of the person before whom the declaration is made ] A [ commissioner for oaths OR [ solicitor OR [ insert other qualification ] ] authorised to administer oaths ]...