The Gray Zone of Cross-Selling in Insurance
Is a client who just subscribed to auto insurance with you a prospect for your home insurance offer? The question seems trivial, but it crystallizes all the complexity of telephone solicitation in insurance.
On one hand, you maintain a legitimate customer relationship: the auto contract involves regular exchanges (amendments, renewals, claims). On the other hand, offering home insurance falls under commercial solicitation for a distinct product.
According to the ACPR (French Prudential Supervision and Resolution Authority), this ambiguity is a source of numerous abuses. In 2025, 23% of complaints received by ACPR concerned cross-selling calls perceived as intrusive by existing clients.
What the Legal Framework Says: Decree 2022-34
Decree No. 2022-34 of January 17, 2022 imposes strict rules for insurance solicitation:
- Prior written consent required for all commercial contact
- Call recording for subscription-related calls (5-year minimum retention)
- No-call rule for people registered on Bloctel, even clients
- Restricted hours: Monday to Friday, 10am-1pm and 2pm-8pm (unless agreed otherwise)
But the real question is: does a client who consents to commercial relationship for product A automatically consent for product B?
CNIL's Answer: No
In its practical guides for the insurance sector, CNIL is clear:
"Consent must be specific to each purpose. A client who agrees to be contacted for auto contract management has not necessarily consented to receive commercial offers for other products."
Practical translation: consent must be segmented by product (or at minimum by major families: property, health, savings).
The 3 Typical Situations
1. Active Client, Same Product Family
Case: Client with auto insurance, you offer comprehensive damage coverage.
Status: ✓ Legitimate customer relationship
Justification: This is a natural complement to the existing contract. GDPR considers this as "legitimate interest" (Article 6.1.f), provided you respect:
- Proportionality (not too frequent calls)
- Easy opt-out ("I no longer wish to be contacted for offers")
- Clear link between products
2. Active Client, Different Product Family
Case: Client with auto insurance, you offer health insurance.
Status: ⚠ Gray zone — consent required
Justification: You cannot invoke legitimate interest. You must have obtained explicit consent for all-products commercial prospecting, typically collected:
- During initial subscription (separate checkbox)
- Via subsequent opt-in (email, SMS, customer portal)
Without this consent, the call is unauthorized solicitation and exposes you to CNIL sanctions.
3. Inactive Client (Canceled Contract)
Case: Client who canceled auto insurance 6 months ago, you call back for home insurance.
Status: ✗ Prospect — strict rules
Justification: Upon cancellation, the person becomes a prospect again. You must:
- Verify they're not on Bloctel
- Have explicit opt-in consent (obtained before or during the former relationship)
- Respect all B2C solicitation rules
In practice, insurers often maintain a 12-month grace period post-cancellation, but legally, protection applies immediately.
Operational Best Practices
1. Strict Database Segmentation
Create consent categories in your CRM:
| Category | Authorized Products | Call Type |
|---|---|---|
| Active Property | Auto, Home, Motorcycle | Legitimate interest |
| Active Health | Health, Welfare | Legitimate interest |
| Multi-product opt-in | All | Explicit consent |
| Opt-out | None (management only) | No commercial calls |
2. Transparent Call Script
From the first seconds, clarify the status:
"Hello Mrs. Smith, this is Marc from [Insurer]. You are currently our client for your auto insurance. I'm calling today to present our new home insurance offer, which could complement your protection. Do you have a few moments?"
Why it works:
- You recall the existing link (legitimacy)
- You clearly announce the commercial purpose (transparency)
- You ask permission to continue (respect)
3. Outbound Number Rotation
Even if your calls are legitimate, a client may report as spam if they feel harassed. To limit damage:
- Use dedicated numbers by call type (management vs commercial)
- Display a local geographic number rather than toll-free
- Send SMS before the call ("Your advisor will call you tomorrow")
Learn more about phone reputation management in our 20-point audit checklist.
4. Report Monitoring
Even in B2C "client" mode, you're not immune. Implement:
- Daily verification of outbound numbers on reporting databases
- Alert threshold: above 5 reports/day on a number, immediate rotation
- Reason analysis: if "spam" comes back, the script or call pressure is poorly calibrated
Discover how a teleconsulting center manages 10,000 calls/day without being blacklisted.
The Broker Case: Even More Complex
If you're a multi-brand broker, the situation gets trickier:
- A client subscribes to auto with Insurer A through you
- You call back to offer home insurance with Insurer B
- Question: are you in customer relationship or solicitation mode?
Legal answer: You're soliciting, because it's a new insurer (thus new contractual relationship). You must have consent for multi-brand prospecting, obtained during first subscription.
Learn more: solutions for insurance brokers.
Sanctions: What Insurers Risk
The insurance sector is under close scrutiny:
- CNIL: up to €20 million or 4% of global revenue (GDPR)
- ACPR: specific sanctions for insurance practices (up to €100 million)
- DGCCRF: fines for misleading commercial practices
In 2025, CNIL issued €487 million in cumulative fines, several targeting insurance call centers. See our analysis of the CNIL 2025 review.
Successful Cross-Sell: A Mutual Insurer Example
A major mutual insurer (unnamed) implemented a granular consent system:
- At subscription, 3 separate checkboxes:
- "I agree to be contacted for contract management"
- "I agree to be contacted for complementary offers (same family)"
- "I agree to be contacted for all group products and services"
- Progressive opt-in: after 6 months of satisfactory relationship, email offering to broaden consent
- Client dashboard: members view and modify preferences anytime
Result: 73% of clients accept "same family" consent, 41% "all products". Most importantly, spam report rate dropped 68% in one year.












