Focus: Navigating the different undercurrents of data privacy law

For the past two years, insurers and businesses have sought to comply with the EU General Data Protection Regulation (GDPR), which came into effect on May 25, 2018. The passage of GDPR was a watershed approach to privacy regulation, inspiring new regulation in other jurisdictions. In the US, businesses are contemplating their compliance requirements under the California Consumer Privacy Act (CCPA) which will come into effect on on January 1, 2020. Given this recent activity, it makes sense to look at these data privacy laws and what they mean for insurers in the London market.