Background
Under the EU General Data Protection Regulation (GDPR), coming into effect on 25 May 2018, all data controllers are required to explain to data subjects in an information notice what personal data they collect, what it is used for, the legal grounds for “processing” such data, and other matters set out in GDPR.
Following publication of the London Market Core Uses Information Notice in November 2017 (LMA Bulletin LMA17-038-MS), the LMA produced related Guidance on the London Market Core Uses Information Notice in February 2018 (LMA Bulletin LMA18-012-SM), which set out the “layered approach” to the provision of Information Notices recommended by the ICO:
| Layer | Notice type | Links |
| Layer 1 | Short Form Notice | links to Layer 2 and potentially Layer 3 |
| Layer 2 | Insurance Market Participant’s own Long Form Information Notice/ Privacy Policy (which would normally reside on their website) | links to Layer 3 |
| Layer 3 | Core Uses Information Notice |
Model Clauses
In conjunction with Clyde & Co, the LMA has now produced a model (Layer 1) Short Form Notice and ancillary consent language / policy clauses, which are available on the Lloyd’s Wordings Repository (LWR), as follows:
Application and Use
These wordings/clauses, as with all LMA model wordings/clauses, are purely illustrative and established and distributed for the guidance of Members, who are free to agree to different wordings.
The wordings/clauses are for use in the UK/EU/EEA only. The LMA is currently discussing with Lloyd’s their potential use in the USA and other non-EU/EEA territories.
Steve Morrell
Head of Regulatory Affairs
Manreet Sher
Senior Executive, Legal & Compliance
Alison Colver
Head of Wordings