The insurance industry will soon benefit from technological advancements, such as developments in  (âAIâ) and . These tools promise cost reduction, the creation of innovative products, and the potential to offer more efficient and tailored services to consumers. However, these new opportunities are mirrored by new legal and regulatory challenges.
What if insurers are using your TV watching list to price your car insurance? What if your insurer knows your diet from your online grocery shopping habits or your fitness levels from your wearable fitness tracker?
A new study from Dr Zofia Bednarz, Lecturer in the Law School at University of Sydney and co-author Dr Kayleen Manwaring (UNSW Law & Justice), has found insurers, using models such as new machine learning algorithms, may be able to collect your online and other data â and apart from anti-discrimination laws, there are no effective constraints on them using that data to price contracts.
âInsurance firms may be using our data collected from a variety of sources â social media, customer loyalty programs or online shopping â to set prices of insurance products and we have no real control over how our data is then used, processed, aggregated and combined,â said Dr Bednarz, who is associate investigator in the
âProtections in our current privacy and data protection law are very limited in practice, and insurance law does not help either,â Dr Bednarz said. âSo insurers can lawfully collect and use this data at the moment.â
The researchers argue that policymakers and regulators should act now to prevent consumer harm before insurers invest in services, software and strategies around big data and AI, and become resistant to subsequent regulation.
Published in , a leading international journal in the field of technology and law, the study found:
New AI and other models can track every move you make online. Photo: Adobe
âVirtually every âdigital traceâ consumers leave can be tracked, and the data extracted may potentially be used for underwriting of contracts,â Dr Bednarz said. âArtificial intelligence and machine learning tools make it possible to obtain valuable inferences regarding risk prediction from that data.â
âInferences that can be drawn from data are very wide-reaching and many of us would find them uncomfortable,â Dr Bednarz said. âIt has been shown that models, such as machine learning algorithms, can (correctly!) guess a personâs sexual orientation from pictures of their face, or possible depression from their posts on Twitter. Think about all the things that can be uncovered about us from our grocery shopping history alone: our diet, household size, maybe even health conditions or social background. It gets even more extensive and possibly precise if we think about information revealed by our social media posts, pictures, likes, or membership in various groups.â
Dr Bednarz also points out her further research, carried out with Professor Kimberlee Weatherall, University of Sydney Law School, indicating insurersâ access to data becomes even easier with the new Consumer Data Right (CDR), which already requires banks to share consumersâ banking data, at their request, with another bank or app, such as to access a new service or offer (potentially also insurance). The CDR is proposed to be expanded to the insurance and superannuation industries soon.
While the Consumer Data Right is advertised as empowering consumers, enabling access to new services and offers, and providing people with choice, convenience and control over their data, Dr Bednarz says that âin practice, however, it could mean insurance firms wonât even need to watch you online to know how much money youâre spending (and on what). They could just ask you to share your banking data through CDR.â
The researchers provide an overview of potential solutions, some already explored overseas, that include:
Dr Bednarz said: âThere is a lot of opacity and secrecy surrounding underwriting processes and data practices of insurers. There is limited control of regulators over what data is collected and used by insurers, and in what ways. Consumers themselves have very little control over their own data.
âWe propose a concept of âextrinsic dataâ - data consumers do not expect to be collected by insurers and used for underwriting. But the issue is even bigger: even if we know insurers are using our data for underwriting, we often donât know how it translates into the risk assessment. And this is why more transparency is needed.â
Declaration: This research was partly funded by the Centre for Law, Markets and Regulation UNSW where Dr Bednarz was employed 2020-2022. Top Image: Adobe.