Reinsurers and GDPR compliance
The European Union's General Data Protection Regulation (GDPR), in force since May 2018, applies to reinsurers as well as insurers, because reinsurance often involves personal data about policyholders and claimants.
Key issues include identifying a lawful basis for processing, handling special-category data such as health information in life and health reinsurance, and managing data transfers outside the EU.
Clear data-sharing agreements between cedents and reinsurers, along with data minimization, help keep reinsurance arrangements compliant.