Credit-Based Insurance Scores: some Observations in the Light of the European General Data Protection Regulation
Abstract
Despite the differences between credit risk and insurance risk, in many countries large insurance companies include credit history amongst the information to be taken into account when assigning consumers to risk pools and deciding whether or not to offer them an auto or homeowner insurance policy, or to determine the premium that they should pay. In this study, I will try to establish some conclusions concerning the requirements and limits that the use of credit history data by insurers in the European Union should be subject to. In order to do this, I shall focus my attention primarily on Regulation (EU) 2016/679. This regulation, that came into force on 24 May 2018, not only forms the backbone of personal data protection in the EU, but is also set to become a model for regulation beyond the borders of the Union. This article will concentrate on two main aspects: the lawful basis for the processing of credit history data by insurers, and the rules that should apply to decisions based solely on automated processing, including profiling.
Received: 30 December 2019
Accepted: 07 February 2020
Published online: 02 April 2020
Downloads
Last update: 26/10/2026
The authors are advised to read their rights carefully. We believe this approach ensures a fair agreement for both parties. These instructions should be read in conjunction with the Ethical Guidelines and the Open Access Policy, Licensing Terms and Copyright of the journal "Deusto Journal of European Studies (DJES)".
1. Authorship and Ethics
By submitting their manuscripts to Deusto Journal of European Studies (DJES), the authors accept and undertake to comply with the conditions of publication without the need to sign an additional transfer agreement with the Publisher (University of Deusto). In doing so, they guarantee that their work is unpublished in any form, original, and does not breach DJES’s Ethical Guidelines or the rights of third parties, and that no licences have been or will be granted that are incompatible with the rights granted to the Publisher.
The authors assume full and exclusive responsibility for the content of the study and formally declare that they have no conflicts of interest that affect the integrity of the research.
2. Publisher’s Rights
By submitting the manuscript, the authors agree to its publication under the Creative Commons CC BY-NC-ND 4.0 licence. Consequently, they grant the Publisher the exclusive, royalty-free and worldwide right of first publication, editing, layout and exploitation of the article. This grant authorises the Publisher to distribute, sub-license and index the work in any format, medium, database or institutional repository, for the purposes of promotion and scientific dissemination.
3. Copyright
The authors retain the intellectual property rights to their article and retain the right to distribute and use their work for teaching purposes, future research or personal archiving, provided that the original publication in the Journal is cited. They are also permitted to republish in other media, provided that a (foot)note is included with the full reference to DJES (including the DOI, where available) and no explicit endorsement of the Journal and/or Publisher is implied.
4. Open access
DJES is an open-access journal; this means that it is freely and fully accessible in its entirety immediately upon publication of its content. However, in accordance with the licence mentioned above, the authors of the articles must always be properly cited; and both commercial use and any modification intended for distribution will require the express prior written permission of the rights holder.
More details are available under the section “Open Access Policy, Licensing Terms and Copyright”.
3.jpg)
2.jpg)
2.jpg)
2.jpg)
2.jpg)
2.jpg)
