Protecting policyholder data starts with the staff who handle it every day
Insurers and brokers hold some of the most sensitive personal and financial data in the economy: health details, next-of-kin information, bank accounts, and claims history. Staff training needs to match that sensitivity.
Where insurance staff are exposed
- Claims staff handling detailed personal, health, and financial information submitted by policyholders, a target for pretexting and data theft.
- Agents and brokers working outside the office on shared or personal devices, often with customer data in spreadsheets or messaging apps.
- Fraudulent claims submissions and social-engineering attempts aimed at claims approval staff.
- Finance teams processing policyholder payouts, exposed to the same BEC and wire-fraud patterns as any finance function.
- Call-center and customer service staff fielding requests that may be pretexting attempts to extract policy or personal details.
NDPA data-protection obligations
Insurers process large volumes of sensitive personal data and carry NDPA accountability obligations like any data controller or processor. Staff training supports the technical and organizational measures the Act expects, alongside internal claims-handling policy.
Read the NDPA staff training page →Frequently asked questions
Does this cover handling of health information in claims?
The All-Staff Core data-protection module covers lawful processing and data subject rights generally under NDPA. For practices also handling US-regulated health data, see our Healthcare Add-On track and HIPAA-specific page.
Can agents working in the field complete training on mobile?
Training is delivered on the Skillermatic platform as short video lessons, designed to be completed on any device, including mobile, between appointments.
How does this help with fraudulent claims specifically?
The Social Engineering Tactics and Phishing Fundamentals modules build the pattern-recognition skills claims staff need to spot manipulation attempts, alongside a clear internal reporting step.