1. Specific processing operations and processing purposes

This section of the Privacy Notice provides information which is for specific processing operations and processing purposes.

More than one of these sections may be relevant to you because of the different types of processing that takes place at MIB. 

If you want general information about MIB's processing, please refer to Section 1 of this Privacy Notice.

2. ask services

About askMID and askCUE 

Navigate holds a central record of all insured vehicles in the UK.  Please see Navigate for further information.

The askMID Check Your Vehicle (CYV) service provides the public with the ability to conduct a free check to ensure that their own vehicle, or a vehicle they have a link to via employment or a leasing agreement, is showing as insured on Navigate.

The askMID Third Party Lookup service provides the public and their representatives with the ability to check whether someone that they have been involved in a road traffic collision with is showing as insured on Navigate, as well as providing limited insurer details.

The Claims and Underwriting Exchange (CUE) is a central database of motor, home and personal injury/ industrial illness incidents reported to insurance companies which may or may not have given rise to a claim.  Please see Claims and Underwriting Exchange (CUE) for further information.

The askCUE service checks the CUE personal injury database for records held about claimants.   It is a statutory requirement that solicitors check the claims records of prospective clients before taking them on. 

A. Information we process about you

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information for the askCUE and askMID services.

       Types of personal       information

      Details

      Service

Claim type

Claim type.

askCUE

Date entered on askCUE

Date enquiry made on the askCUE service.

askCUE

Loss date/incident date

Date of incident for which the solicitor has been instructed to act on behalf of the client.

askCUE and askMID Third Party Lookup

Enquiry reference

The user’s enquiry reference number.

askCUE and askMID Third Party Lookup account users

Vehicle Registration Number/Mark (VRN/VRM)

The VRM of the vehicle being enquired about.

In the case of askMID Third Party Lookup, the VRM of the enquirer’s vehicle.

askMID Check Your Vehicle and Third Party Lookup

Vehicle make and model

The make and model of the vehicle as entered on Navigate.

askMID Check Your Vehicle.

Involvement in the accident

The enquirer’s involvement in the incident (e.g. including but not limited to whether they are the owner of a car involved in the accident or a pedestrian involved in an accident).

askMID Third Party Lookup

Payment details

Financial details, such as your bank account details or payment card information.

askMID Third Party Lookup

Insurance showing on Motor Insurance Policy Data database

A “yes” or “no” response is provided as to whether a vehicle is showing on the database at the time of the enquiry.

askMID Check Your Vehicle

Insurance details

Insurer name and contact details.

askMID Third Party Lookup

 

B. Why we process your personal data and our legal grounds

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below.

      Purpose

       Legal basis

askMID Check Your Vehicle

For members of the public to check whether their vehicle is recorded as insured on Navigate.

Legitimate interests: members of the public have a legitimate interest in checking whether their vehicle is recorded on Navigate.

askMID Check Someone Else’s Vehicle

For members of the public, or their representatives, to obtain insurance details of third party vehicles following an incident, for the purposes of claims management.

Legitimate interests: members of the public have a legitimate interest in identifying the insurer of a third party vehicle in order to initiate their claim.

 

askCUE

To search a claimant’s CUE PI record for fraud checking purposes, as part of the legal process required to submit a personal injury claim.

Legal obligation:

It is a statutory requirement under the relevant Pre-Action Protocols that claimant representatives check claims records of their clients before taking them on.

 

C. Where we get your information from

In addition to the people and organisations listed in Where do we get your information from, we may also get your information in the following ways:

  • Insurers, intermediaries, and in the case of fleet policies (including lease plans) directly from the relevant organisation managing the fleet or lease plan: Provide the motor insurance policy and CUE data.

3. Continuous Insurance Enforcement (CIE)

About Continuous Insurance Enforcement (CIE) 

Under the CIE scheme, MIB and the Driver and Vehicle Licensing Agency (DVLA) work in partnership to continuously identify uninsured vehicles by systematically comparing DVLA vehicle records against those held in Navigate. 

Please see the Navigate Motor Insurance Policy Data section for further information on Navigate. 

Please visit the Driver and Vehicle Licensing Agency (DVLA) Privacy Notice for further information on the processing undertaken for CIE. 

4. Claims

A. Information we process about you

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information. 

​     Types of personal information 

      ​Details 

Accident information 

Details about the accident. 

Medical information 

Details about your health, any injuries sustained in the accident and any subsequent medical treatment. 

Property damage information 

Details relating to property damage resulting from the accident. 

Other claims-related information 

Details about any other losses or expenses being claimed. 

Financial information 

Relevant financial information, such as payslips, bank or building society account details, and credit card, bank or building society statements and payments. 

Social media information 

This includes publicly available data from sources such as social networking sites. 

Expert information 

Where you are an expert, relevant details such as your name, business contact details, area of expertise, professional qualifications, registration details, location of examination rooms (where applicable), whether you accept home visits and any applicable restrictions and fees. 

 

B. Why we process your personal data and our legal grounds

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below. 

      ​Purpose 

​      Legal basis 

Process claims 

To process claims for compensation submitted to us in relation to accidents involving a motor vehicleIncluding investigating and administering the claim, providing guidance to claimants and paying any compensation or other costs. 

For all information: 

Legitimate interests: we have a legitimate interest in using your information where this is necessary to investigate and administer a claim. 

For special category and criminal convictions data (e.g. including medical and criminal offences and convictions):

The establishment, exercise or defence of legal claims. 

Fraud prevention 

We may use evidence of fraud or fundamental dishonesty in order to inform decisions regarding payment and prosecution. 

We may also share personal information with fraud prevention agencies who will use it to prevent fraud and money laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance or employment. 

For all information:

Legitimate interests: We have a legitimate interest in using your information in order to assess and administer payment decisionsWe have a legitimate interest in disclosing your information in order to assist with crime prevention and the prosecution of offenders, where applicable. 

 For special category and criminal convictions data:

Preventing fraud; and the establishment, exercise or defence of legal claims.

Establishing our legal position, debt administration and recovery of losses from liable parties 

We may use and share your personal information – including sharing it with our legal advisers – when looking to establish our legal position. We may also process your personal information in the context of debt administration and the recovery of losses from liable parties.  

For all information:

Legitimate interestsWe have a legitimate interest in understanding and establishing our legal rights and obligations and in debt administration and the recovery of losses from liable parties, which will help to reduce the MIB levy and provide an additional deterrent against uninsured driving and hit and run drivers. 

For special category and criminal convictions data:

The establishment, exercise, or defence of legal claims. 

Experts 

We collect information about experts in order to maintain a list of experts who may be contacted in relation to claims. We also process information about experts in connection with the provision of their services in relation to a claim 

Legitimate interests: We have a legitimate interest in maintaining a list of relevant experts and in contacting and dealing with experts involved in providing services to us. 

Consent 

Please note that we do not generally process your personal information based on consent, as we rely on the other legal bases stated in the tableHowever, medical professionals will often only release patient medical records to us with the explicit consent of the patientMIB may therefore ask claimants to provide this consent, which might be via the completion of a mandatePlease note that medical professionals may also contact you separately to gain this consent.  

C. Where we get your information from 

In addition to the people and organisations listed in Where we get your information from, we may also get your information in the following ways:

  • Your employers or any other persons or organisations to whom you may have provided services: The information requested may include wage and other benefits/pension details, absence/attendance records, your full personnel file and details of any services provided. 

  • Publicly accessible registers or sources of information: Examples include: 

    • government sources, such as the Driver and Vehicle Licensing Agency’s (DVLA) MOT check, Companies House, VAT Information Exchange System (VIES) VAT number validation, the Compensation Recovery Unit (CRU) of the Department for Work and Pensions (DWP) and His Majesty’s Revenue and Customs (HMRC). Information requested may include applications for benefits, tax records, payments made and driving licence details; 
    • local authorities. Information requested may include taxi and private hire licensing details, benefits claimed and funding received; and 
    • social media and internet search engines. 
  • MIB databases: such as Navigate (including Motor Insurance Data and the Motor Insurance Anti-Fraud and Theft Register (MIAFTR)) and the Claims and Underwriting Exchange (CUE). 

  • Fraud prevention databases: such as the Insurance Fraud Bureau (IFB) and the Insurance Fraud Register (IFR). 

  • Finance, ID and background verification organisations, banks and building societies. 

  • Medical professionals. 

  • Experts: (such as vehicle engineers, accident reconstruction experts and medical experts providing evidence of injuries), including experts that we instruct as part of the processing of a claim. 

  • Insurers: information requested may include full details of any policies held, claims made and monies received. 

  • Other parties involved in the accident: including witnesses. 

  • Registered keepers or owners of vehicles. 

  • Law enforcement authorities: including the police. 

  • Professional advisors: including lawyers, accountants, bankers and auditors. 

  • Other service providers: including IT suppliers and financial and administration services providers. 

D. ​Who we share your information with 

In addition to the people and organisations listed in Section 1: Who we share your information with, we may also share your information with the following: 

  • Subscribers: as part of the proper administration of a claim, including identity and background verification organisations; insurers; law enforcement bodies; government departments; local authorities; DVLA; the Compensation Recovery Unity (CRU) of the Department for Work and Pensions (DWP) and experts. 
  • Third parties involved, either directly or indirectly, in a claim: as part of the proper investigation and administration of the claim. This includes sharing personal information with the claimant, the defendant and witnesses (either directly or via their representatives). Where we conclude a claim, we may then subsequently share your personal information as part of legitimately seeking to recover any compensation monies we have paid out. For example, we may share your personal information with the uninsured driver as part of seeking to recover from them the compensation monies we have paid out as part of concluding the original claim. 

5. Claims and Underwriting Exchange (CUE)

About the Claims and Underwriting Exchange (CUE) 

The Claims and Underwriting Exchange (CUE) is a central database of motor, home and personal injury/ industrial illness incidents reported to insurance companies which may or may not have given rise to a claim 

​A. Information we process about you 

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information for CUE. 

Types of personal information 

      ​Details 

​      Service 

Bank details 

Bank and card details.

CUE Personal Injury (PI)

Mortgage account number 

​Mortgage account number

CUE Home 

Vehicle details 

Details of the vehicles involved in the incidents, including the Vehicle Registration Mark/Number (VRM/VRN), the Vehicle Identification Number (VIN), make and model. 

CUE PI, CUE Motor 

Benefits information 

Eligibility for benefits (disability, incapacity care, mobility, income support, industrial injuries and jobseeker allowance).  

CUE PI 

Medical information 

Details about any injuries sustained in an incident, any subsequent medical treatment, number of ambulance journeys, days spent in hospital. 

CUE PI 

Property damage information 

Details relating to property damage resulting from an incident. 

CUE Home, CUE Motor 

Claims information 

Claim loss dates and details. 

CUE Home, CUE Motor and CUE PI 

 

B. Why we process your personal data and our legal grounds 

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below. 

​      Purpose 

​      Legal basis 

   To enable CUE Subscribers to see the incident data: 

- For the administration and provision of insurance policies; 

- To verify facts during a claims investigation;  

- Law enforcement purposes, including to prevent and detect fraud throughout the insurance lifecycle (including at the point of taking out insurance as well as at the point of claim). 

Please see the Who we share your information with section to see who Subscribers are. 

For all information: 

Legitimate interests: MIB and the insurance industry have a legitimate interest to process data for the prevention and detection of fraud 

For special category data (CUE PI health and injuries data):

Processing is necessary for reasons of substantial public interest: Preventing fraud.  

Research

To research, predict and help to inform how claims may look in the future.

Legitimate interests: It is in the legitimate interest of the insurance industry to research and predict how claims may look in the future, to enable them to prepare.

 

C. Where we get your information from 

In addition to the people and organisations listed in Where do we get your information from, we may also get your information in the following ways: 

  • Subscribers: Insurers and their representatives (such as brokers, intermediaries and Delegated Authorities) provide the data to CUE. 

D. Who we share your information with 

In addition to the people and organisations listed in Who we share your information with, we may also share your information with the following: 

  • Subscribers: Insurers and their representatives (such as brokers, intermediaries and Delegated Authorities) enquire against CUE as described in Why we process your personal data and our legal grounds above. 

  • CUE Nominated Suppliers: Parties authorised by MIB to access, establish, administer and amend the database, including supplying data services for the CUE database. 

  • The Department for Work and Pensions (DWP): CUE PI data is shared with the DWP where required.
  • Thatcham: to support research into how claims may look in the future.

6. Data Subject Rights

A. Information we process about you

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information where you submit a Data Subject Request (DSR) to MIB Group. 

      ​Types of personal information 

Details 

Individual details 

The details you provide to MIB Group when you submit your request, as well as any further details you provide as part of the request process 

As relevant, these include your title (e.g. Mr/Mrs/Ms), your full name, your address, your date of birth, your National Insurance (NI) number, your Vehicle Registration Number/Mark (VRN/VRM) and your Driving Licence Number. 

Representative data 

Where a request is made on behalf of someone else, evidence of authority (such as a Power of Attorney letter, a letter of consent or a Letter of Authority). 

Identity (ID) data 

Either details from our identity verification partner as to whether or not you have passed their identity (ID) check, or evidence of ID to confirm an individual’s ID and address details. 

Personal data held about you in connection with the request (DSR) 

The information processed and collected about you in relation to your request 

Please see the relevant sections of this Privacy Notice to understand the data that may be processed about you in the relevant areas of MIB. 

 

B. ​Why we process your personal data and our legal grounds 

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below. 

​      Purpose 

      ​Legal basis 

To process your Data Subject Request 

Including ID verification, searching for, collating and preparing any results found, communicating with you and any other processing required in order to process your request. 

For all information: 

Necessary to comply with a legal obligation. 

- Legitimate interests: it is in the legitimate interests of you and MIB to process your data in connection with a request you make to us.   

- Consent. 

 For special category and criminal offence data: 

 - Explicit consent. 

7. Prospective employees, employees, temporary workers and contractors

A. Information we process about you

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information where you are an MIB Group employee, contractor or temporary worker; or where you apply for a job at MIB Group.

      Types of personal information

      Details

Individual details

In addition to the individual details stated under the Information we process about you section, we also process details relating to your next of kin, dependants and emergency contacts, as well as photographs of you where necessary for the purposes stated under the Legal grounds for processing your data section.

Recruitment data

This includes any information included in your right to work documentation, references, your CV, background checks, the application form completed by you as part of the application process and any other information you may provide to us as part of the application process.

Employee data

This includes employment records, performance information, disciplinary and grievance information, training and development records, monitoring data (such as CCTV, login and access records and IT usage data), salary, annual leave, pension and benefits information and any other information gathered as part of your ongoing employment with MIB Group.

Financial data

This includes bank account information, remuneration (pay and benefits) information and tax information.

CCTV data

This includes any CCTV footage (visual and audio) of you, recorded when you visit premises of the MIB Group.

Special category and criminal offence data

This includes information about your race, ethnicity, religious beliefs, sexual orientation, political opinion, trade union memberships, disabilities (including requirements for reasonable adjustments), health, criminal offences and in limited circumstances biometric data*.

*biometric data means data relating to your physical, physiological or behavioural characteristics.

 

Failure to provide information:

Where we ask you to provide personal information to us on a mandatory basis, we will inform you of this at the time of collection and in the event that particular information is required to discharge our duties as an employer or satisfy our legal obligations this will be indicated.

Where you refuse to provide information that we reasonably require to fulfil our obligations this may mean that we are unable to continue with your job application or it could result in your employment being terminated, as MIB will not have the personal data we believe to be necessary to manage and administer our relationship with you.

B. Why we process your personal data and our legal grounds

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below.

      Purpose

      Legal basis

      All data subjects

To comply with our legal obligations

 To comply with our legal obligations in connection with:

- Data protection;

- Tax;

- Health and safety;

- Anti-money laundering;

- Anti-discrimination;

- Mandatory reporting obligations;

- Disclosures required by law enforcement agencies;

- Fraud investigations; and

- Any other legal obligations placed on us from time to time.

For all information:

Necessary to comply with a legal obligation. 

- Necessary to protect your vital interests or of another person where you are physically or legally incapable of giving consent: for example in exceptional emergency situations, such as a medical emergency.

 For special category and criminal offence data:

Necessary for the purposes of carrying out the obligations and exercising the rights of you or MIB in the field of employment law, social security, and social protection law, to the extent permissible under applicable laws. 

- Necessary to protect your vital interests or of another person where you are physically or legally incapable of giving consent: for example in exceptional emergency situations, such as a medical emergency).

 

Legal disputes

To deal with legal disputes, including bringing or defending legal claims.

For all information:

Legitimate interests: It is in MIB’s interests to defend and enforce our rights.

For special category and criminal offence data:

For the establishment, exercise or defence of legal claims.

Complaint management

To manage and investigate any complaint under MIB’s grievance policy (or other relevant policies) to meet our obligations under employment law.

For all data:

Necessary to comply with a legal obligation. 

For special category and criminal offence data:

Necessary for the purposes of carrying out the obligations and exercising the rights of you or MIB in the field of employment law, social security and social protection law, to the extent permissible under applicable laws.

CCTV

If you visit one of our MIB owned premises, to monitor activity on our premises.

Legitimate interests: Necessary for our legitimate interests to keep individuals safe and secure and to investigate any incidents on our premises.

      Job applicants

Application process

To process job applications in order to make a decision about your recruitment or appointment, for example, inviting you to interview and pre-employment vetting.

For all data:

Performance of a contract: to take steps at the applicant’s request to enter into a contract of employment.

- Necessary for our legitimate interests: to ensure efficient and effective recruitment.

- Necessary to comply with a legal obligation: for example, to make reasonable adjustments. 

For special category and criminal offence data:

Necessary for the purposes of carrying out the obligations and exercising the rights of you or MIB in the field of employment law, social security and social protection law, to the extent permissible under applicable laws.

      Employees, contractors and temporary workers

To contact you

To contact you about your employment and about essential MIB updates.

For all data:

Necessary for our legitimate interests: to ensure necessary and appropriate communication is maintained with you.

Performance of a contract with you.

Pay and other benefits and services

To administer and process your pay, pensions, benefits and other services you may sign up for.

For all data:

- Performance of a contract with you

- Necessary for our legitimate interests: to manage our workforce and general HR processes

- Necessary to comply with a legal obligation

For special category and criminal offence data:

Necessary for the purposes of carrying out the obligations and exercising the rights of you or MIB in the field of employment law, social security and social protection law, to the extent permissible under applicable laws.

Employee recognition programme

To administer our employee recognition programme.

Necessary for our legitimate interests: to develop and reward our workforce.

Leave and absence

To process your leave and absence requests.

 

 

 

 

 

 

For all data:

- Performance of a contract with you

- Necessary for our legitimate interests: to manage our workforce effectively

- Necessary to comply with a legal obligation 

For special category and criminal offence data: 

Necessary for the purposes of carrying out the obligations and exercising the rights of you or MIB in the field of employment law, social security and social protection law, to the extent permissible under applicable laws.

Support and management

 

To support and manage you.

For all data:

Performance of a contract with you

- Necessary for our legitimate interests: to manage our workforce effectively

- Necessary to comply with a legal obligation

For special category and criminal offence data:

Necessary for the purposes of carrying out the obligations and exercising the rights of you or MIB in the field of employment law, social security and social protection law, to the extent permissible under applicable laws.

Information security (including monitoring)

To ensure our IT systems are secure and are being used appropriately in accordance with our internal policies, standards and procedures. Including identification and access verification functionality options (which you have chosen to use).

For all information:

Necessary for our legitimate interests: to prevent and detect unauthorised use of MIB Group information.

For special category and criminal offence data:

With your explicit consent: Further details of how we use IT usage data can be found in our Information Security Policy.

Compliance monitoring

To monitor compliance with applicable legal and regulatory requirements and our internal policies, standards and procedures.

Necessary to comply with a legal obligation.

Necessary for our legitimate interests: to ensure we operate our organisation effectively.

Statutory communications

To send you statutory communications.

Necessary to comply with a legal obligation.

Statistical analysis

To carry out statistical analysis of our employees and workplaces, for example, to comply with equality and diversity requirements or to keep MIB’s commitment to equal opportunities under review.

For all data:

- Necessary for our legitimate interests: to assess trends, to develop and grow our organisation and to inform our business strategy.

- Necessary to comply with a legal obligation.

For special category and criminal offence data:

Necessary for the purposes of carrying out the obligations and exercising the rights of you or MIB in the field of employment law, social security and social protection law, to the extent permissible under applicable laws.

To promote our organisational aims

Where relevant, for publishing communications via our Intranet, social media and other publicity channels to promote our organisational aims.

Consent

Necessary for our legitimate interests: to promote our organisational aims and objectives.

To manage our relationship with you

To manage our relationship with you which will include: 

- Notifying you about changes to our terms or privacy notice; and

- Asking you to provide a review or take a survey.

- Performance of a contract with you.

- Necessary to comply with a legal obligation.

- Necessary for our legitimate interests: to keep our records updated and to obtain employee feedback.

 

C. Where we get your information from

In addition to the people and organisations listed in Where do we get your information from, we may also get your information in the following ways:

  • Third parties or publicly available sources: We will receive personal data about you from various third parties and public sources as set out below:
    • Analytics providers
    • Employment Agencies
    • Advertising networks
    • Search information providers such as credit reference agencies and vetting agencies
    • Your previous employer
    • Nominated referees
    • Educational and professional establishments
    • Medical professionals
    • Professional advisory service providers

D. Who we share your information with

In addition to the people and organisations listed in Section 1: Who we share your information with, we may also share your information with the following:

  • HR and employee survey service providers.
  • Marketing service providers.
  • Professional advisers: including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
  • HM Revenue & Customs, regulators and other authorities: who require reporting of processing activities in certain circumstances.
  • Law enforcement bodies: where necessary to prevent and detect crime.

8. Hub (MyLicence and No Claims Discount (NCD))

About the MIB Hub: NCD and MyLicence 

The No Claims Discount (NCD) service is a digital solution, designed to replace the manual exchange between motor insurers and policy holders, that confirm a motorist’s NCD entitlement. 

The MyLicence service is a facility that gives motor insurance providers access to accurate driver licence data, held by the DVLA, during the underwriting process. 

The NCD and MyLicence services are operated by MIB, and sit within the MIB Hub. 

​A. Information we process about you 

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information for MIB Hub. 

Types of personal information 

​      Details 

      Service 

Driving licence data  

Driving licence number and whether the driver holds a GB (Great Britain) driving licence 

NCD and MyLicence 

Additional driving licence data 

Licence valid to and from dates, entitlement details, endorsement details, restriction details (including medical restrictions), driving offence details (including offence and conviction dates, custodial periods, fines, penalty points, disqualification details and the rehabilitation spent date). 

MyLicence 

No Claims Discount (NCD) data 

Number of years of no claims discount, and whether the NCD cover is standard, guaranteed or protected. The nature of business for which the NCD has been accrued. NCD renewal and cancellation dates. 

NCD 

Vehicle details 

Vehicle Registration Mark (VRM)(also known as Vehicle Registration Number (VRN)). 

NCD 

 

B. Why we process your personal data and our legal grounds 

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below. 

​      Purpose 

​      Legal basis 

Insurance purposes 

For insurance underwriting purposes, relating to:  

- applications for insurance 

- ​midterm insurance policy adjustments 

- policy renewals 

- verification of cover in the event of a claim 

The information is used by insurance organisations to verify details to enable them to provide more accurate quotes. 

For all data: 

Legitimate interests: For the legitimate purposes of improving the customer experience when calculating the insurance quote and providing fairer quotes. 

For special category and criminal offences data on MyLicence: 

Processing is necessary for a substantial public interest: necessary for an insurance purpose. 

Law enforcement purposes, including fraud prevention and detection  

For law enforcement purposes, including the prevention and detection of crime (including fraud). 

For all data: 

Legitimate interests: Where it is necessary for the Police and other authorised third parties (such as the Insurance Fraud Bureau (IFB)) to process the data for the prevention and detection of crime. 

For special category and criminal offences data on MyLicence: 

Processing is necessary for a substantial public interest: preventing fraud and preventing or detecting unlawful acts. 

 

C. ​Where we get your information from

In addition to the people and organisations listed in Where do we get your information from, we may also get your information in the following ways: 

  • Authorised users: Insurers, intermediaries, software houses and aggregators provide the data to the Hub. 

  • The Driver and Vehicle Licensing Agency (DVLA).

D. Who we share your information with 

In addition to the people and organisations listed in Who we share your information with, we may also share your information with the following: 

  • Authorised users: Insurers, intermediaries, software houses and aggregators enquire against the Hub as described in Why we process your personal data and our legal grounds above. 

9. Motor Insurance Anti-Fraud and Theft Register (MIAFTR)

About MIAFTR 

The Motor Insurance Anti-Fraud and Theft Register (MIAFTR) database contains records of written off and stolen vehicles, as defined by the Code of Practice for the Disposal of Motor Vehicle Salvage. MIAFTR was designed and developed to help monitor vehicles written off for insurance purposes, to help trace and recover stolen vehicles and to help detect fraud. 

A. Information we process about you 

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information for MIAFTR. 

Types of personal information 

​      Details 

Vehicle details  

The Vehicle Registration Mark (VRM) (this is sometimes also known as the Vehicle Registration Number (VRN)) and Vehicle Identification Number (VIN). 

Damage, write-off and stolen information 

​Details of the specific damage to the vehicle.

 

B. ​Why we process your personal data and our legal grounds 

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below. 

​      Purpose 

​      Legal basis 

Insurance purposes 

​- To validate information as part of the claims handling process; 

- To validate information at the point of quote; 

- ​For the administration of motor insurance policies. 

Legitimate interests: MIB and the Insurance industry have a legitimate interest to detect and prevent fraud (e.g. by validating information provided). 

To notify the Driver and Vehicle Licensing Agency (DVLA) of vehicles no longer considered roadworthy 

To notify the DVLA of any vehicles no longer considered roadworthy (also known as “total losses” or “written off”). 

Legitimate interests: MIB have a legitimate interest in supporting the insurance industry comply with their legal obligation to notify the DVLA of written-off or stolen vehicles. 

Law enforcement purposes, including fraud prevention and detection  

For law enforcement purposes, including the prevention and detection of crime (including fraud). 

Legitimate interests: Where it is necessary for the Police and other authorised third parties (such as the Insurance Fraud Bureau (IFB)) to process the data for the prevention and detection of crime. 

Vehicle history checks 

To validate the history of a vehicleVehicle details are provided to approved organisations in order for them to provide history checks (known as vehicle provenance checks). 

Legitimate interests: MIB, approved vehicle provenance check organisations and consumers have a legitimate interest to enable consumers to look up the history of a vehicle to check that it is not being miss-sold to them.  

Only vehicle details and damage/theft information are provided to these recipients. 

Research 

To reasearch, predict and help inform how claims may look in the future. 

Legitimate interests: It is in the legitimate interest of the insurance industry to research and predict how claims may look in the future, to enable them to prepare for it.

 

C. Where we get your information from

In addition to the people and organisations listed in Where do we get your information from, we may also get your information in the following ways: 

  • Subscribers: Insurers and their representatives (such as brokers, intermediaries and Delegated Authorities) provide the data to MIAFTR. 

D. Who we share your information with 

In addition to the people and organisations listed in Section 1: Who we share your information with, we may also share your information with the following: 

  • Subscribers: Insurers and their representatives (such as brokers, intermediaries and Delegated Authorities) enquire against MIAFTR as described in Legal grounds for processing your data above. 

  • The Driver and Vehicle Licensing Agency (DVLA): Please see the Legal grounds for processing your data above. 

  • Vehicle Provenance check organisations: Please see the Vehicle history checks section under Legal grounds for processing your data above. 

  • Members of the public: Please see the Vehicle history checks section under Legal grounds for processing your data above.

  • Thatcham: to support research into how claims may look in the future.

About Navigate: Motor Insurance Policy Data 

Navigate holds a central record of all insured vehicles in the UK.  

A. ​Information we process about you 

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information for Navigate: Motor Insurance Policy Data. 

      Types of personal information

      Details

Vehicle Registration Mark/Number (VRM/VRN)

VRM/VRN of the vehicle.

Named driver details

In addition to policy holder details, the name and date of birth of named drivers are also recorded.

Policy end and start dates

The start and end date of the insurance policy cover.

Reason for policy end date

The reason for the policy end date.

 

B. Why we process your personal data and our legal grounds 

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below. 

​      Purpose 

Legal basis 

Insurance purposes 

​- To support claims handling; 

- To conduct checks at the point of quote. 

Legitimate interests: The insurance industry have a legitimate interest in identifying liable insurers in relation to claims, as well as to identify relevant past or current insurers at the point of quote where it may be relevant to underwriting processes. 

Information Centre

Provide an “information centre” of insurance.

Legal obligationthe method by which Insurers comply with the EU Fourth Motor Insurance Directive and the Implementing UK regulations, the Motor Vehicle (Compulsory Insurance) (Information Centre and Compensatory Body) Regulations 2003 and the Motor Vehicles (Third Party Risks)(Amendment) Regulations 2001. 

Fraud  

For the prevention and detection of fraud. 

Legitimate interests: MIB and the insurance industry have a legitimate interest to process data for the prevention and detection of fraud. 

Law enforcement purposes  

For law enforcement purposes, including the prevention and detection of crime, including the crime of driving with no insurance. 

Legal obligationProcessing is necessary for compliance with a legal obligation to which the controller is subject (Road Traffic Act 1988). 

Legitimate interests: Where it is necessary for the Police to process the data for the prevention and detection of crime, the protection of life and property, and the preservation of order. 

Vehicle licensing 

To verify the insurance status of a vehicle for vehicles to be used for private hire (e.g. taxis). 

Legitimate interests: Where an authority has a legitimate interest to check a vehicle is appropriately insured to be on the road and carry paying customers. 

Continuous Insurance Enforcement (CIE) 

Please see the CIE section for further information. 

Please see the CIE section for this information. 

Police Helpline 

Please see the Police Helpline section for further information. 

Please see the Police Helpline section for this information. 

askMID services 

Please see the ask services sections. 

Please see the ask services sections for this information. 

Vehicle recovery 

To enable vehicle recovery companies to identify an insurer to contact where they are recovering a vehicle as a result of a road traffic collision. 

Legitimate interests: The vehicle recovery companies, on behalf of the police, have a legitimate interest to identify an insurer in order for damaged vehicles to be appropriately managedRelevant insurers have a legitimate interest to be notified when a vehicle they are the responsible insurer for has been damaged and recovered as the result of a road traffic collision. 

Research

To research, predict and help inform how claims may look in the future.

Legitimate interests: It is in the legitimate interest of the insurance industry to research and predict how claims may look in the future, to enable them to prepare for it.

 

C. ​Where we get your information from

In addition to the people and organisations listed in Where do we get your information from, we may also get your information in the following ways: 

  • Subscribers: Insurers and their representatives (such as brokers, intermediaries and Delegated Authorities) and in the case of fleet policies (including lease plans) the organisation managing the fleet or lease plan, provide the Motor Insurance Policy Data to Navigate. 

D. ​Who we share your information with 

In addition to the people and organisations listed in Section 1: Who we share your information with, we may also share your information with the following: 

  • Subscribers: Insurers and their representatives (such as brokers, intermediaries and Delegated Authorities) enquire against Navigate as described in Legal grounds for processing your data above. 

  • The Driver and Vehicle Licensing Agency (DVLA): Please see the CIE information under Legal grounds for processing your data above. 

  • Members of the public: Other members of the public may be entitled to search for your vehicle insurer if they have been in a road traffic collision with you, please see the ask services section for more information. 

  • Vehicle recovery organisations: Including Emergent Network, Intelligence and NationalSalvageGroup.  Please see the Vehicle recovery section in the Legal grounds for processing your data above for more information. 

  • Thatcham: to support research into how claims may look in the future.

11. Police Helpline

About Police Helpline  

The Police Helpline is a service provided primarily to the police, to enable them to verify the insurance details when having stopped a driver at the roadside and/or police staff working at impound facilitiesPolice Helpline Operatives speak directly with insurance companies to clarify information and make sure that the police have the right information with which to make a decision. 

A. Information we process about you 

In addition to the personal information listed in Information we process about you under Section 1, we may also process the following information for Police Helpline. 

Types of personal information 

Details 

Caller data 

Name, contact phone number, email address, Police Officer shoulder number, organisation/constabulary. 

Driver and policy holder data 

Name, address, date of birth, vehicle details (including make, model and Vehicle Registration Mark (VRM)), purpose of journey, vehicle’s registered keeper, vehicle’s registered owner, insurance policy details, policy holder details, insurance policy status and details. 

Other relevant information 

Any other relevant information provided to us to support with the enquiry on a case by case basis, including but not limited to, driving licence restrictions. 

 

B. ​Why we process your personal data and our legal grounds 

In addition to the legal grounds listed in Section 1: Why we process your personal data and our legal grounds, we may also process the following information for the purposes listed below. 

​      Purpose 

Legal basis 

Caller data: to provide the Police Helpline services: 

​- To enable ongoing communication between MIB and the caller. 

- To confirm the identity (ID) of the caller 

- ​For MIB to maintain records of enquiries 

Legitimate interests: MIB and the Police have a legitimate interest in ensuring the security of data by confirming ID and to maintain communication whilst investigations are ongoing regarding the insurance status of a vehicle 

Driver and policy holder data: to verify insurance details for the police: 

​- When a vehicle is stopped at the roadside, or has previously been stopped at the roadside, by the police, and 

- When determining when to release an impounded vehicle. 

To prevent uninsured / incorrectly insured vehicles from being driven on the roads: 

​- Where the police attend a Road Traffic Collision 

To identify the insurer/s of the vehicles, oridentify cases where there is no valid insurance cover. 

 Legitimate interests: MIB, the Police and society have a legitimate interest in uninsured / incorrectly insured vehicles being kept off the roads.  

All data: to support court enquiries: 

Where the processing is necessary to support court cases, including but not limited to: 

- ​Appeals 

- ​Subsequent insurance records checks 

Legitimate interests: where it is in the legitimate interest of supporting a court enquiry to process the data;

Or  

Legal obligation: when the MIB are legally required to provide the information. 

  

​C. Where we get your information from

In addition to the people and organisations listed in Where do we get your information from, we may also get your information in the following ways: 

Caller data: 

  • From the Caller: when making enquiries with MIB. 

All other data: 

  • From the Police and staff at impound facilities: when they make an enquiry through the Police Helpline Service.  The information these staff provide to MIB is generally given to them by drivers and policy holders. 

  • From Callers who are: 

- Members of the police in line with the purposes described in the Why we process your data and our legal grounds section. 

- A member of MIB staff, supporting the police, as described in the Why we process your data and our legal grounds section. 

​- An individual who requires the data in line with a court enquiry, as described in the Why we process your data and our legal grounds section. 

Who obtain the information from the relevant drivers and/or policyholders in the circumstances described in the purposes under the Why we process your data and our legal grounds section. 

  • From Insurers and their representatives:(such as brokers, intermediaries and Delegated Authorities): 

- who add your data to the Motor Insurance Policy Data on Navigate (please see the Motor Insurance Policy Data on Navigate section for further information), and  

- when MIB make direct enquiries with them in relation to an enquiry by the Police. 

D. Who we share your information with 

In addition to the people and organisations listed in Section 1: Who we share your information with, we may also share your information with the following: 

  • The Police and staff at impound facilities: in relation to enquiries made through the Police Helpline service. 

  • Insurers and their representatives: such as brokers, intermediaries and Delegated Authorities in relation to enquiries made through the Police Helpline service.