IrelandI was profiled for insurance purposes. Is this lawful?
Profiling for insurance purposes is lawful in Ireland only if it complies with the Data Protection Act 2018, including fairness, transparency, and safeguards — especially where it produces legal or significant effects.
What the Law Says
The Data Protection Act 2018 governs how personal data—including profiling—may be used in Ireland. Section 57 specifically addresses automated decision-making and profiling, setting strict conditions when such processing has legal or similarly significant effects on individuals, such as insurance eligibility or pricing.
Profiling means any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person — for example, assessing risk, reliability, or behaviour for insurance underwriting.
Under section 57, you cannot be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you — unless one of three exceptions applies: (a) it is necessary for entering or performing a contract; (b) it is authorised by EU or Irish law; or (c) it is based on your explicit consent.
Even where an exception applies, the insurer must implement suitable measures to safeguard your rights — including the right to obtain human intervention, express your point of view, and contest the decision.
Statutory TextA data subject shall not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
— Data Protection Act 2018, s. 57
What to Do
Check the insurer’s privacy notice — it must clearly explain if and why profiling is used.
Ask the insurer for meaningful information about the logic involved and the significance and consequences of the profiling.
Object to profiling at any time — especially if it leads to unfair or discriminatory outcomes.
Request human review of any automated insurance decision affecting you (e.g., refusal, higher premium).
Lodge a complaint with the Data Protection Commission if your rights under section 57 are breached.
Sources
Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.