Cyber-insurance underwriting typically focuses on cybersecurity indicators such as breach history, vulnerability scans and security controls. However, it often overlooks another important source of exposure: how organisations collect, use, retain and share personal data.
This UKFin+ feasibility project is developing an AI-driven framework that brings privacy risk into cyber-insurance assessment. By combining privacy indicators with existing security-based models, the project aims to support more transparent, accurate and evidence-based underwriting decisions.
The project is led by Newcastle University in collaboration with Durham University and industry partner Somerset Bridge Group.
Dr. Lei Shi
Project Lead
Newcastle University
Provides strategic oversight for the project, leads its engagement with UKFin+ and supports the development of usable, responsible tools for industry practitioners.
Dr. Maksim Kalameyets
Technical Co-lead
Newcastle University
Leads the project’s technical work, including AI and NLP adaptation, privacy-risk modelling, API development, evaluation and documentation.
Dr. Stergios Aidinlis
AI Law Co-lead
Durham University
Supports the translation of legal and regulatory requirements into practical privacy-risk indicators.
Dr. Rebecca Owens
Socio-technical Co-lead
Durham University
Leads the project’s stakeholder engagement, helping ensure that the resulting framework is legally informed, inclusive and responsive to professional needs.
We welcome perspectives from professionals working in cyber insurance, underwriting, brokerage, compliance, privacy, data governance, cybersecurity, legal services and organisational risk assessment.
To learn more about the research, please contact:
Dr Maksim Kalameyets
maksim.kalameyets@newcastle.ac.uk