On18 May 2022 the Italian data protection authority announced an opinion, issued upon request by an insurance company, on the role of banks processing customers' personal data for the purpose of placing insurance policies.
In providing the above-mentioned opinion, the Authority considered that banks act as data controllers of the personal data of policyholders/insured persons on behalf of insurance companies, which in turn are recognised as autonomous data controllers.