FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Aipedia: Insolvency practitioners
Firms can automate IVA and debt solution onboarding, but solely automated significant decisions now carry UK GDPR safeguards and vulnerable debtors need human attention. Unsuitable recommendations can lead to complaints, regulatory scrutiny and claims.
Part of: AI in Insolvency practitioners
In short
Automated onboarding helps personal insolvency firms handle high volumes, but the people affected are often vulnerable. The Insolvency Code of Ethics requires the IP to decide whether technology output is appropriate (R321.1). UK GDPR Articles 22A to 22D, in force from 5 February 2026, require safeguards where significant decisions are taken solely by automated means, with tighter limits on special category data. Missed vulnerability or an unsuitable recommendation can lead to complaints and claims; PI usually responds to negligence claims, subject to the wording.
Firms handling IVAs and other personal insolvency work deal with high volumes of enquiries from individuals in financial difficulty. Automation helps at the front end: online forms that gather income, expenditure and debts, tools that read uploaded bank statements, and scoring that suggests whether a debtor looks suitable for an IVA, bankruptcy or another route. R3's 2026 report lists pre-appointment onboarding among the uses of AI in the profession.
The people on the other side of these systems are often stressed, sometimes unwell, and may not understand the consequences of what they are agreeing to.
Three sets of rules meet here.
The Insolvency Code of Ethics. R321.1 requires the IP to determine whether using technology output is appropriate for the intended purpose. 115.1 A6 flags insufficient data as a threat, which matters when a debtor's self-reported figures are incomplete. 117.3 A2 warns of automation bias. R103.2 requires staff who handle onboarding to be trained and supervised.
UK GDPR solely automated decisions. New Articles 22A to 22D, inserted by section 80 of the Data (Use and Access) Act 2025 and in force from 5 February 2026, apply to "significant decisions" with no meaningful human involvement. A significant decision is one that produces a legal effect, or a similarly significant effect, for the person. Where such a decision is taken, Article 22C requires safeguards that give the individual information about the decision and let them make representations, obtain human intervention and contest it. Decisions based on special category data, such as health information disclosed by a vulnerable debtor, face tighter restrictions under Article 22B.
Vulnerable individuals. The IPA's Dealing with Vulnerable Individuals aide memoire, on its guidance list, is relevant to how automated journeys identify and respond to vulnerability.
Illustrative scenario: an online journey uses an automated assessment to filter enquiries. A debtor mentions a recent mental health crisis in a free-text box, which the system does not read, and the scoring routes them straight to an IVA proposal pack. No adviser speaks to them before the proposal is drafted. The arrangement fails within a year, and the debtor complains that an IVA was never suitable and that no one considered their circumstances.
Exposure can include:
A claim that a debtor was negligently advised into an unsuitable arrangement is professional liability, and PI usually responds subject to the policy terms and excess. Fines and penalties are commonly uninsurable or excluded, and a data protection complaint may sit partly with cyber cover depending on the wording; see GDPR fines and PI. Complaint handling costs are often not covered unless a claim is made. R3 reports that some practitioners are unsure whether their PI covers errors arising from AI use, which is worth raising with your broker if onboarding is automated.
Apex arranges PI for insolvency practitioners, including firms with high-volume personal insolvency work. A broker can review how your wording treats claims from debtors and data protection complaints. See the PI guide for IPs and the insolvency practitioners hub.
They can. Articles 22A to 22D apply to significant decisions about individuals taken solely by automated means. If an automated assessment decides a debtor's route without meaningful human involvement, the firm must provide safeguards including information, representations, human intervention and the right to contest.
Ensure a trained person genuinely reviews the assessment and can change the outcome before a recommendation or proposal is made. A rubber-stamp check may not count as meaningful human involvement, so record what the reviewer considered.
Automated journeys should identify signs of vulnerability and route those cases to a person. The IPA publishes an aide memoire on dealing with vulnerable individuals, and special category data such as health information faces tighter UK GDPR restrictions on automated decisions.
Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start a PI quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.
