Requests for information from insurance companies

Data included in crime or incident reports can only be disclosed to an insurance company who are members of the Association of British Insurers (ABI) or their appointed agents.

The request should be made in accordance with the criteria detailed within the Memorandum of Understanding (MOU) between the Association of Chief Police Officers and the Association of British Insurers.

Applications should be submitted in the agreed format of an Appendix D(a) or D(b) consent form, with the appropriate fee (£27.10 for an Appendix D(a), £115.50 for an Appendix D(b).

All cheques should be made payable to City of London Police Ref CB740-64344

• When using an Appendix D(a) or D(b), insurance companies must ensure that the person reporting the crime or incident has signed the form giving consent to the release of their personal data. In some cases, where possible, it may be appropriate for more than one person to sign the appendix form.
• Please also ensure that sufficient information (e.g. name of insured party/victim/witness, crime reference number, force wide incident number, date and exact location of crime/incident etc) is provided to enable us to accurately locate the crime/incident to which your request relates. Failure to provide sufficient information may prevent your request from being processed and result in the request being returned and delays in receiving the information you are seeking.
• Requests that do not fall within the criteria of an Appendix D(a) or D(b) application, but instead relate to a request for information to support enquiries into an insurance claim that appears prima facie fraudulent, then applications should be in accordance with Section 5 of the MOU.  Section 5 requires the insurer to summarise the evidence which gives rise to the suspicion of fraud and the insurer should supply the police with copies of the supporting documentation using an Appendix E form for this purpose.

If you are not part of the ABI you can consider making a Subject Access Request on behalf of someone or request through legal avenues under Schedule 2 Part 1 5 (1) of the Data Protection Act. (In email or writing to us).