Data Protection

Home / Data Protection

Summary of MIBI Data Protection Statement

Overview of this document

This document contains a summary of the Motor Insurers’ Bureau of Ireland (the “MIBI”, “we”, “us” or “our”) Data Protection Statement (“Summary”). This Summary intended to give you the main details about how information relating to you (your “Personal Data”) will be used, handled or otherwise processed by the MIBI, as part of our legal and statutory functions. The information in this Summary is non-exhaustive and should be read in conjunction with our full Data Protection Statement.

We are required to give you the information in this Summary, including to inform you about your data protection rights, under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Acts 1988 to 2018 (together the “Data Protection Legislation”).

The full Data Protection Statement can be viewed on our website by clicking here. You can also request a copy of the full Data Protection Statement by calling us on +353-1-676 9944 or emailing us at info@mibi.ie. We encourage you to regularly visit our website, www.mibi.ie (the “Website”). We may change this Summary and the Data Protection Statement from time to time at our sole discretion.

1. Responsibility for your Personal Data: Who is MIBI?

The MIBI is a not-for-profit organisation registered in Ireland to compensate victims of road traffic accidents caused by uninsured and unidentified vehicles. All insurance companies underwriting motor insurance in Ireland must, by law, be members of MIBI and contribute to a fund to cover claims in proportion to their market share.

The MIBI performs a variety of legal and statutory functions as a “controller” of your Personal Data (a term defined under the GDPR, meaning we are responsible for your Personal Data when we process it). This Summary explains how we process your Personal Data when performing our legal and statutory functions:

  • Our principal role is to compensate victims of road traffic accidents caused by uninsured and unidentified vehicles. This role is regulated under the terms of an agreement with the Minister for Transport.
  • As the Green Card Bureau for Ireland, governed by the Council of Bureaux, we are responsible for investigating accidents in Ireland caused by vehicles registered outside the State and for investigating the insurance position of Irish registered vehicles that cause an accident outside of Ireland.
  • We are responsible for operating the Motor Insurance Information Centre of Ireland. In this role, the MIBI manages the Irish Motor Insurance Database (“IMID”) which is a central register of all vehicles insured in Ireland.
  • We are responsible for operating the Motor Insurers Insolvency Compensation Fund, as provided for under the Insurance (Amendment) Act 2018.
  • We act as the Irish Motor Compensation Body (“IMCB”) (called An Comhlacht na hÉireann um Chúiteamh Mótair) under the Motor Insurance Insolvency Act 2024. We are responsible for operating the IMCB to ensure that injured parties of accidents remain protected where their EU-based motor insurer becomes insolvent.

2. Collection of Personal Data

For further information on how we use your Personal Data, see section 2 of our full Data Protection Statement.

2.1. What Personal Data do we collect?

We will collect Personal Data either directly from you or indirectly about you from third parties or third-party sources. For more information on the types of Personal Data we collect, and the categories of Personal Data we collect specifically to your relationship with the MIBI, see section 2.1 of our full Data Protection Statement. Depending on our relationship with you, we will collect and process some or all of the following Personal Data:

  • Basic and contact details
  • Vehicle and incident details
  • Financial information
  • Claims history
  • Claimant/Defendant Sensitive Data
  • Claimant/Defendant Criminal Data
  • Witness/Expert Data
  • Other information.

2.2. How we collect your Personal Data?

We collect Personal Data either (a) directly from you; or (b) indirectly from third parties or third party sources. Some examples of the sources of collection of your Personal Data are set out below:

Source Details
Direct engagement with you We collect your Personal Data directly from you when you (or your representative(s), where applicable):

  • Contact us by e-mail or telephone
  • Visit our website (including our portal)
  • Submit a claim form
Indirect engagement about you We obtain Personal Data from:

  • Experts (e.g., doctors, actuaries, engineers, accountants)
  • Insurers, brokers and their agents
  • Court Services
  • State and/or insurance industry registers and databases (e.g., Central Bank of Ireland, IMID, Insurance Link, National Driver File, Risk Intelligence Vehicle Check)
  • Other third parties involved in an incident/claim (e.g., pedestrians, witnesses, specialist service providers, our handling offices, investigators, legal professionals, and law enforcement)
  • Insolvent insurance undertakings (including associated liquidators, brokers, and agents)
  • Other EU motor compensation bodies (e.g., Green Card Bureau)
  • Public websites (e.g., media outlets, national vehicle and driver file)

Please note: in the event that you do not provide us with your Personal Data for the purposes set out in this document and our full Data Protection Statement, we may not be able to process your claim or otherwise engage with you.

3. How we use your Personal Data

For further information on how we use your Personal Data, see sections 3 to 6 of our full Data Protection Statement.

The summary table below outlines the key context on which (the “Legal Basis“) the MIBI processes your Personal Data. It also provides examples of how and why (the “Purposes and Nature of Processing“) the MIBI will process your Personal Data.

Legal Basis Purpose & Nature of Processing
MIBI
For more detailed information, see section 3 of our full Data Protection Statement.
Establishment, exercise or defence of legal claims
  • To investigate, establish, exercise and defend actual or prospective legal claims.
Perform contractual obligations
  • To manage and investigate any claim made by you or against you as an uninsured driver or as the owner of an uninsured vehicle.
Comply with legal obligations
  • To comply with our legal and regulatory obligations under insurance-related legislation (including but not limited to the applicable Road Traffic Acts).
Pursue our legitimate interests
  • To record any calls you make to the MIBI (acting in any capacity) for training, quality and verification purposes.
  • To verify your (or your authorised representative’s) identity in any of our interactions with you (or your representative), whether in person, on the telephone, online or where necessary in other circumstances.
MIBI as the Irish Motor Compensation Body (IMCB)
For more detailed information, see section 4 of our full Data Protection Statement.
Comply with legal obligations
  • To obtain, collect and process your Personal Data to manage claims in compliance with legal obligations to which the IMCB is subject under the Motor Insurance Insolvency Compensation Act 2024.
MIBI as operator of the Irish Motor Insurance Database (IMID)
For more detailed information, see section 5 of our full Data Protection Statement.
Comply with legal obligations
  • To manage and maintain the IMID which operates as a central insurance database to identify the insurance status of vehicles in Ireland (including but not limited to the applicable Road Traffic Acts).
MIBI Website
For more detailed information, see section 6 of our full Data Protection Statement.
Pursue our legitimate interests
  • To provide you with access to the Website and to allow you to use the Website.

4. Sharing of your Personal Data

For more detailed information, see section 7 of our full Data Protection Statement.

There are various circumstances where we may share your Personal Data with third parties. Where you are the claimant or defendant in a claim, or where you have provided information on a claim as a witness or expert, we may share your Personal Data to process the claim.

The recipients of your Personal Data may include the following:

Recipient Category & Details
Your representatives

  • Any party you have given us permission to speak to (legal representatives, a relative or friend)
  • Other people or companies associated with you (such as a vehicle repairer, doctor, medical specialist etc.)
Our representatives

  • Our employees/staff, claims’ handling offices, solicitors, barristers, investigators, recovery agents, doctors and medical specialists
  • Expert witnesses, translators, witnesses to any incident(s), Insurance Link, insurance companies and other agents, contractors, etc.
State or government departments, bodies or agencies

  • An Garda Síochána, State Claims Agency, Revenue Commissioners, Central Bank of Ireland, Data Protection Commission of Ireland or other public bodies
IT support and Website service providers

  • Tekenable, S-Branch, CapVentis, PFH, Edgescan, Orium, Barracuda, etc.
MIBI Information Centre users

  • Any third-party individual who submits an enquiry to the MIBI information centre seeking information on the relevant insurer relating to a vehicle.

5. International Transfers & Personal Data

For more detailed information, see section 9 of our full Data Protection Statement.

The MIBI operates the Green Card Bureau in Ireland pursuant to the Road Traffic (Third Party Risks) (Visiting Motorists) Regulations 1952 and the Mechanically Propelled Vehicles (International Circulation) Order 1992. On occasion, we in our capacity as Green Card Bureau (or a service provider on our behalf), may transfer certain aspects of your Personal Data within the European Economic Area and outside the European Economic area. In such circumstances, we will ensure that such transmissions are carried out securely and in accordance with data protection agreements signed by the MIBI in conjunction with the Council of Bureaux who govern the Green Card system.

If you would like to find out more about any such transfers, please contact us at info@mibi.ie.

NOTE: the MIBI does not transfer your Personal Data outside of the European Economic Area / European Union when it is performing its functions as the IMCB.

6. Call Recordings

We may record or monitor telephone calls in order to ensure accuracy in the recording of information communicated to us and for training, quality and verification purposes.

7. Retention of Personal Data

For more detailed information, see section 11 of our full Data Protection Statement.

We have a comprehensive data retention schedule. In general, we will store your Personal Data:

a) in accordance with our obligations under applicable Irish and EU laws;

b) for as long as we have a relationship with you plus a reasonable period of time after that; and/or

c) for a period we consider it is prudent to do so. Your Personal Data will be stored as long as necessary in light of the purpose(s) for which it was obtained.

8. Your Data Protection Rights

For more detailed information, see section 12 of our full Data Protection Statement.

As an individual (known as a ‘data subject’ under the Data Protection Legislation), you have data protection rights which are set out in the table below. Please understand that these rights are not absolute and may be restricted in certain circumstances (e.g. where the MIBI must apply our legal and regulatory obligations and our contractual obligations).

Data Subject Right & Details
  • Right of Access: You have the right to obtain confirmation as to whether or not your Personal Data is being processed and, if so, to request a copy of the Personal Data that we hold about you, including to obtain access to it (in an intelligible format).
  • Right of Rectification: You have the right to have your Personal Data rectified when it is inaccurate, and completed (or updated) when it is incomplete, ambiguous or out of date.
  • Right of Erasure: You have the right to ask for the deletion of your Personal Data in certain cases, e.g. when the Personal Data is no longer necessary for the purposes for which it was collected.
  • Right not to be subject to Automated Individual Decision-Making, including Profiling: We do not use automated decision-making, however, we do limited profiling of claims to identify anomalies and highlight suspicious claims that may require more detailed investigation.
  • Right to Data Portability: In certain circumstances, you may request us to provide you with your Personal Data: (1) in a structured, commonly used and machine-readable format, and (2) to transmit your Personal Data directly to another data controller (where technically feasible).
  • Right to Object: You have a right to object at any time to the processing of your Personal Data where we process your Personal Data on the legal basis of pursuing our legitimate interests. You do not have the right to object where we process your Personal Data in relation to the establishment, exercise or defence of legal claims or where we have compelling legitimate interest to process your Personal Data.
  • Right to Restriction of Processing: You have the right to request, in certain circumstances, that your Personal Data no longer be processed, except for its retention, by us.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority in the EU Member State of your habitual residence, place of work, or in the place where an alleged infringement occurred.

9. Communications

It is envisaged that we (or our service providers on our behalf) may contact you from time to time in relation to dealing with your claim or in connection with your dealings with us. This contact will relate to the purposes set out in in this Summary and the full Data Protection Statement and may include (without limitation):

1. Administration and management of your claim;

2. To agree reimbursement of costs and outlays with you as an uninsured driver and/or owner of an uninsured vehicle;

3. To deal with enquires about insurance cover on vehicles;

4. To deal with requests from you; and

5. To deal with complaints and data access requests from you.

10. Contact Details for Queries or Complaints

If you have any questions or complaints about this Summary, our full Data Protection Statement or MIBI’s processing of your personal data, please contact our Data Protection Officer at the details listed below.

Data Protection Officer
Motor Insurers’ Bureau of Ireland
5 Harbourmaster Place IFSC
Dublin D01 E7E8
Telephone: +353-1-676 9944
Email: info@mibi.ie