NDA for UK Insurance: Protecting Underwriting Data, Actuarial Models and Claims Information

The UK insurance market — one of the largest in the world, anchored by Lloyd's of London and a major London Market — runs on the exchange of commercially sensitive information. Insurers, reinsurers, brokers, managing general agents (MGAs), actuarial consultants and insurtech companies routinely share underwriting data, proprietary pricing models, client risk profiles, claims information and strategic plans before, during and after commercial negotiations. An NDA ensures that information shared in confidence remains confidential, is used only for the agreed purpose, and can be recovered through enforceable legal remedies if misused.

When UK insurance businesses need an NDA

NDAs are needed in the UK insurance sector at the following stages:

• Reinsurance negotiations: before a cedant shares its loss history, reserve data, exposure analyses and pricing assumptions with a reinsurer or reinsurance broker during programme placement.
• Lloyd's syndicate participation: before a capital provider or corporate member reviews a managing agent's underwriting strategy, book of business, claims experience and financial projections.
• Broker and MGA appointments: before an insurer shares its rating models, underwriting guidelines, risk appetite documentation and bordereaux requirements with a prospective MGA or broker partner.
• Insurtech and technology partnerships: before an insurer shares historical claims and underwriting data with a technology vendor, or before a vendor shares proprietary AI models, data science methodology or software architecture with a prospective insurance client.
• M&A and portfolio transfers: before an acquirer or reinsurer conducts due diligence on a book of business, reserve adequacy, claims history or underwriting performance.
• Claims management partnerships: before claims data, litigation strategy or reserve information is shared with an external loss adjuster, legal panel firm or claims management company.
• Actuarial and consulting engagements: before an actuarial consultant accesses a client's loss development triangles, reserving assumptions, pricing models or regulatory capital calculations.

What an insurance NDA must cover

A standard commercial NDA may be inadequate for insurance transactions. An insurance NDA should address:

• Comprehensive definition of confidential information: explicitly covering underwriting data, actuarial models, claims information, loss histories, pricing algorithms, reinsurance programme terms, binding authority guidelines, client risk profiles, and strategic or financial plans.
• Purpose restriction: limiting use of disclosed information strictly to the specific transaction, evaluation or engagement — prohibiting use of a counterparty's pricing data, loss ratios or claims experience for any commercial purpose outside the agreed negotiation.
• Multi-party sharing in the London Market: if information is shared across co-insurers, following markets, brokers and capital providers, the NDA should identify each party, impose parallel obligations, and specify which party bears responsibility for each recipient's compliance.
• Data protection consistency: provisions governing personal data (policyholder, claimant and employee data) must be consistent with UK GDPR and accompanied by a data processing agreement where the sharing creates a controller–processor relationship.
• Regulatory permissions: the NDA should confirm that sharing is consistent with each party's FCA regulatory obligations — particularly for firms subject to FCA Handbook requirements on data security and outsourcing.
• Return or destruction: loss development triangles, reserve schedules, actuarial reports and other highly sensitive documents should be returned or securely destroyed if negotiations conclude without a transaction.

Insurance NDA duration: how long is appropriate?

Duration depends on the type of information shared:

• Pricing models and actuarial assumptions: three years from the date of disclosure, with a trade secret survival clause for genuinely proprietary models and methodologies that remain commercially sensitive beyond that period.
• Claims data and loss histories: five years, reflecting long-tail liability, potential regulatory investigations and litigation timelines in UK insurance.
• Reinsurance programme terms: for the life of the programme and three years after expiry — reinsurance claims can emerge long after a policy period ends.
• Client and policyholder personal data: subject to UK GDPR retention limits regardless of the NDA term; data must not be retained beyond what is lawful under applicable data protection law.
• M&A due diligence materials: two to three years from the date of disclosure, or until the transaction completes or is terminated, whichever is later.

Which NDASafe template to use

The appropriate template depends on the structure of the insurance transaction:

• Mutual NDA (£29): the default for most insurance negotiations — reinsurance placement, Lloyd's syndicate discussions, MGA appointments and insurtech partnerships — where both parties are sharing genuinely sensitive information.
• One-Way NDA, Disclosing (£29): use where only one party is sharing confidential information — a broker sharing a client's risk profile with a panel of insurers, or an actuarial consultant sharing methodology documentation with a prospective client.
• M&A Due Diligence NDA (£29): use for portfolio acquisitions, book transfers and Lloyd's syndicate M&A — covers data-room provisions, no-poach during diligence and confidentiality that survives a collapsed deal.
• NDA with IP Assignment (£29): use where an insurtech vendor is developing proprietary technology or data science models specifically for an insurer and the insurer needs to own the output.
• Complete NDA Bundle (£79): all eight NDA variants. Suitable for insurers, managing agents, brokers and Lloyd's syndicates managing a range of client, partner, reinsurer, technology and investment relationships.