It's a complete misnomer - consumers have absolutely no 'protection'. I've looked though the T&Cs of around 5 different policies I have, and here are a few databases my policy and association has been disclosed to - and it is not an amalgamation of them, simply a SINGLE vehicle policy! Far from my data being protected, it is disclosed to FOUR different databases, neither of which I have the opportunity to opt-out of.
1) My information will be used my by insurance company, and also to selected third parties (unspecified number) and reinsurers (unspecified number).
2) Policy details will be added to MID - The Motor Insurers Database (this is run by the Motor Insurers Information Centre. MID data 'may' (?) be used by the DVLA & DVLNI for the purposes of Electronic Vehicle Licencing, and by the Police for establishing whether the vehicle is insured or not. Data will also be disclosed to other insurers seeking 'the MIIC and Motor Insurers Bureau' to identify policy information. People requiring your details to pursue an insurance claim may also be given your data.Details from
Motor Insurers' Information Centre
3) Claims & Underwriting Exchange Register. Run by Insurance Database Services (IDS Ltd)
4) Motor Insurance Anti-Fraud & Theft Register. Run by the ABI (Association of British Insurers). A service designed to check on fraudulent claims
As an educational exercise, it might be fun to make a Subject Access Request on each, especially when you've at no time been a customer of anyone except the firm you bought your policy from!