Trends Analysis (2021-2025)
Insurance
We dive into the five-year performance trajectories (2021–2025) of the evaluated companies and entities in the Insurance Sector. By analysing historical trends and core metrics, this section reveals key patterns, competitive advantages, and priority improvement areas providing actionable insights into compliance drivers and hurdles to empower better decision-making and forward-thinking planning.
Trends in performance of assessed companies over time in the Insurance Sector
Performance Trends for Assessed Insurance Companies over the Years (2024-2025) in Rwanda
The performance of insurance companies in Rwanda in adhering to data protection and privacy standards shows marked differences across the sector between 2024 and 2025. Old Mutual Rwanda exhibited a significant improvement, rising from 41% in 2024 to 51% in 2025. This increase reflects strengthened privacy practices, likely driven by enhanced compliance frameworks, systematic data protection policies, and focused employee training. The improvement indicates a proactive approach to managing sensitive customer data and aligning with regulatory requirements.
Prime Insurance experienced a slight increase, moving from 38% to 39%. While this suggests incremental progress in privacy compliance, the modest improvement points to the need for ongoing efforts to enhance processes, monitor adherence, and close potential gaps in data protection.
In contrast, Britam Rwanda saw a decline from 31% to 29%, signaling potential weaknesses or challenges in maintaining robust privacy controls. This reduction could be due to outdated practices, insufficient monitoring, or limited resources dedicated to compliance, which raises concerns about exposure to regulatory risks and reputational impact.
BK Insurance Rwanda (BKI) maintained a low performance of 10% across both years. This stagnation highlights persistent gaps in privacy and data protection practices, indicating a high risk of non-compliance and the need for urgent intervention to establish effective data governance and safeguard customer information.
Overall, the data reveals uneven performance across the insurance sector, with some companies making substantial progress while others lag behind. These trends underscore the critical importance of continuous investment in privacy frameworks, regular audits, staff training, and regulatory alignment. Companies that fail to improve may face heightened regulatory scrutiny, increased risk of data breaches, and diminished customer trust, while those demonstrating proactive compliance are better positioned to maintain credibility and operational resilience in the evolving data protection landscape.
Performance Trends for Assessed Insurance Companies over the Years (2024-2025) in Tanzania
An assessment of data protection and privacy compliance performance among selected insurance companies in Tanzania reveals notable variations in progress and maturity between 2024 and 2025.
Jubilee Life Insurance recorded a decline in performance, decreasing from 54% in 2024 to 50% in 2025. Although the company continues to demonstrate relatively strong compliance compared to some peers, the downward trend suggests challenges in sustaining established privacy controls. This may point to gaps in ongoing monitoring, evolving regulatory requirements, or the need to refresh internal data protection policies and staff awareness programs.
NIC Tanzania experienced a significant drop, from 34% in 2024 to 8% in 2025. This sharp decline indicates serious weaknesses in data protection and privacy practices and raises concerns regarding regulatory compliance and data governance. The results suggest potential lapses in implementing privacy controls, insufficient oversight, or failure to adapt to heightened data protection expectations, exposing the company to elevated legal, operational, and reputational risks.
In contrast, Britam Insurance Tanzania demonstrated substantial improvement, increasing from 43% in 2024 to 54% in 2025. This positive trajectory reflects strengthened compliance efforts, likely driven by improved data governance structures, enhanced security measures, and greater organizational awareness of privacy obligations. The improvement positions the company more favorably in managing sensitive customer data and aligning with data protection regulations.
Heritage Insurance also showed notable progress, rising from 38% to 48% over the same period. This improvement suggests deliberate efforts to address prior gaps in privacy compliance, potentially through policy updates, staff training, and better implementation of privacy-by-design principles. While progress is evident, further improvements are required to reach higher compliance maturity.
Overall, the data highlights uneven compliance maturity across the insurance sector. Companies showing improvement demonstrate the benefits of sustained investment in data protection frameworks and governance, while declining or low performance underscores the risks associated with inadequate compliance mechanisms. These trends emphasize the importance of continuous monitoring, regulatory alignment, and institutional commitment to data protection and privacy. Failure to maintain or improve compliance may result in increased regulatory scrutiny, exposure to data breaches, and erosion of customer trust, whereas consistent improvement enhances operational resilience and stakeholder confidence.
Performance Trends for Assessed Insurance Companies over the Years (2024-2025) in Mauritius
An assessment of data protection and privacy compliance performance among selected insurance companies in Mauritius indicates both progress and regression across the sector between 2024 and 2025.
State Insurance Company of Mauritius Ltd (SICOM) demonstrated a substantial improvement in compliance performance, increasing from 42% in 2024 to 62% in 2025. This significant rise suggests strengthened data governance arrangements, improved implementation of privacy controls, and greater alignment with regulatory requirements under Mauritius' data protection framework. The improvement reflects a more proactive approach to managing personal and sensitive data and reducing compliance risks.
Jubilee Allianz General Insurance Mauritius Ltd maintained a consistently high level of performance, improving slightly from 61% in 2024 to 65% in 2025. This steady upward trend indicates a relatively mature data protection and privacy program, characterized by effective policies, ongoing compliance monitoring, and institutionalized privacy practices. The company appears well positioned to manage regulatory obligations and protect customer data effectively.
Eagle Insurance recorded a modest improvement, rising from 41% to 45%. While this progress indicates incremental strengthening of privacy practices, the overall performance remains moderate. This suggests that although foundational controls may be in place, further efforts are required to enhance compliance maturity, particularly in areas such as risk assessments, staff awareness, and incident response readiness.
In contrast, Mauritius Union Assurance (MUA) experienced a notable decline, falling from 72% in 2024 to 55% in 2025. Despite remaining above the mid-range, the decrease signals potential challenges in sustaining previously strong compliance standards. This decline may reflect gaps in ongoing monitoring, evolving regulatory expectations, or resource constraints affecting the consistency of data protection practices.
Overall, the data reveals uneven progress across the Mauritian insurance sector. Companies demonstrating improvement highlight the positive impact of sustained investment in privacy governance, compliance oversight, and organizational awareness. Conversely, declining performance underscores the importance of continuous reinforcement of data protection controls to prevent regression. These trends reinforce the need for insurers to embed privacy as a core operational priority, conduct regular compliance reviews, and adapt proactively to regulatory and technological developments to safeguard customer trust and minimize legal and reputational risks.
Performance Trends for Assessed Insurance Companies over the Years (2024-2025) in Zimbabwe
An analysis of data protection and privacy compliance performance among selected insurance companies in Zimbabwe reveals significant variation in compliance maturity and progress between 2024 and 2025.
Old Mutual Zimbabwe recorded a decline in performance, decreasing from 49% in 2024 to 42% in 2025. While the company continues to demonstrate moderate compliance relative to other market participants, the downward trend suggests challenges in sustaining privacy controls. This may reflect gaps in continuous compliance monitoring, evolving regulatory expectations, or the need to update data protection policies and operational practices to maintain alignment with legal and best-practice standards.
Zimnat Lion Insurance showed a marked improvement, increasing from 5% in 2024 to 43% in 2025. This significant rise indicates substantial strengthening of data protection and privacy practices, likely driven by the introduction of governance structures, enhanced security controls, and increased organizational awareness of compliance obligations. The improvement reflects a positive shift toward more responsible handling of personal data and reduced regulatory risk.
Alliance Insurance remained unchanged at a low level of 4% in both 2024 and 2025. This stagnation highlights persistent deficiencies in data protection and privacy compliance, suggesting limited implementation of core privacy controls and governance mechanisms. The consistently low performance places the company at high risk of regulatory non-compliance, data breaches, and associated reputational damage.
Cell Insurance demonstrated slight improvement, increasing from 4% in 2024 to 6% in 2025. While this indicates some progress, overall performance remains very low. The data suggests that initial steps toward compliance may have been taken; however, substantial effort is still required to establish effective data protection frameworks and meet regulatory expectations.
Overall, the findings indicate uneven compliance across the Zimbabwean insurance sector. While some companies have made notable strides in strengthening privacy practices, others continue to lag significantly. These trends underscore the importance of sustained investment in data protection governance, regular compliance assessments, and staff training. Insurers that fail to address persistent compliance gaps remain exposed to regulatory enforcement, operational disruption, and erosion of customer trust, whereas those demonstrating improvement are better positioned to enhance resilience and credibility in an increasingly data-driven regulatory environment.
Performance Trends for Assessed Insurance Companies over the Years (2024-2025) in Kenya
An assessment of data protection and privacy compliance performance among selected insurance companies in Kenya indicates overall improvement across the sector between 2024 and 2025, with varying degrees of progress among individual insurers.
Jubilee Insurance Kenya demonstrated a strong improvement in compliance performance, increasing from 52% in 2024 to 66% in 2025. This notable rise suggests enhanced implementation of data protection frameworks, strengthened governance structures, and improved organizational awareness of privacy obligations. The upward trend reflects a proactive approach to aligning operations with data protection requirements and mitigating privacy-related risks.
Britam Insurance Kenya also showed consistent improvement, rising from 51% to 61%. This progress indicates ongoing efforts to strengthen privacy controls, such as improved data handling procedures, policy updates, and staff training. The improvement positions the company more favorably in managing personal and sensitive customer data in line with regulatory expectations.
ICEO Lion Insurance recorded a marginal decline, decreasing slightly from 51% in 2024 to 50% in 2025. While the change is minimal, it suggests stagnation in compliance efforts and highlights the need for renewed focus to prevent regression. Without continuous improvement, the company may face challenges in keeping pace with evolving data protection requirements and emerging risks.
CIC Insurance Group Kenya showed a clear improvement, increasing from 52% to 61%. This positive trend reflects strengthened privacy practices and greater institutional commitment to data protection compliance, likely supported by improved oversight and implementation of internal controls.
Overall, the data indicates a generally positive trajectory for data protection and privacy compliance within the Kenyan insurance sector, with most companies demonstrating measurable improvements. However, the mixed performance underscores the importance of sustained investment in privacy governance, regular compliance reviews, and continuous staff training. Insurers that maintain upward momentum are better positioned to ensure regulatory compliance, reduce exposure to data breaches, and strengthen customer trust, while those showing stagnation or decline risk falling behind regulatory expectations and best practice standards.
Performance Trends for Assessed Insurance Companies over the Years (2021-2025) in Uganda
The data protection and privacy compliance performance of UAP Old Mutual, Sanlam Uganda, Britam Insurance, and Jubilee Insurance demonstrates sustained and, in most cases, accelerated improvement over the period 2021 to 2025. Compared with last year's assessment, the 2025 results indicate that earlier gains have not only been maintained but further strengthened, reflecting growing institutional maturity in data protection governance across the sector.
UAP Old Mutual continues to show a strong upward trajectory. Following its improvement from 40% in 2021 to 53% in 2024, the company recorded a further increase to 70% in 2025. This progression indicates a consolidation of earlier compliance efforts and the embedding of data protection practices into core operations. The 2025 score suggests enhanced implementation of privacy controls, stronger oversight mechanisms, and improved accountability for personal data handling. Compared to last year's analysis, UAP Old Mutual has moved closer to best-practice compliance, although continuous refinement remains necessary to address emerging risks and regulatory developments.
Sanlam Uganda has demonstrated one of the most significant transformations in the sector. After improving from 0% in 2021 to 44% in 2024, the company achieved 55% in 2025, confirming that the improvements noted in last year's analysis have translated into sustained compliance gains. This continued upward trend suggests that foundational data protection frameworks introduced in earlier years are now being operationalized more effectively. While progress is evident, the current performance level indicates the need to further strengthen monitoring, incident response readiness, and staff awareness to achieve higher compliance maturity.
Britam Insurance has shown steady but incremental improvement. The company moved from 40% in 2021 to 48% in 2024, and further to 50% in 2025. This suggests that Britam Insurance has maintained its commitment to enhancing privacy practices, but the pace of improvement has slowed relative to peers. Compared with last year's analysis, the marginal increase highlights the importance of renewed focus on strengthening governance structures, risk assessments, and data lifecycle management to avoid stagnation.
Jubilee Insurance continues to demonstrate strong momentum. Building on its significant rise from 0% in 2021 to 51% in 2024, the company recorded 73% in 2025, representing the highest score among the four insurers. This improvement confirms that the substantial progress identified in last year's analysis has been reinforced through more advanced privacy controls and compliance mechanisms. The 2025 result indicates a higher level of alignment with regulatory expectations and positions Jubilee Insurance as a sector leader in data protection and privacy practices.
Overall, the 2025 results reflect a positive and maturing compliance landscape within the Ugandan insurance sector. Compared to last year's analysis, all four companies have either sustained or improved their performance, suggesting that investments in data protection frameworks, governance, and compliance oversight are yielding tangible results. However, the differing rates of progress underscore the need for continuous improvement. Companies with rapid gains must focus on sustainability and resilience, while those with slower growth should reassess their compliance strategies to avoid plateauing.
As regulatory expectations and cyber risks continue to evolve, maintaining and strengthening data protection practices will be critical to mitigating legal and reputational risks, enhancing customer trust, and ensuring long-term operational resilience.