Market Entry for a Foreign Personal Lines Insurer in DACH: What to Settle Before the Licensing Question

Structure, distribution architecture and partner selection drive the timeline more than the licence itself.

---

Short answer

Regulatory authorisation is rarely the bottleneck in a DACH market entry. For an EU/EEA insurer, a freedom-of-services notification typically takes one to three months. Building a distribution architecture that actually produces premium takes nine to eighteen. Starting with the licensing question means committing to a structure before you know what you are selling, to whom, and through which channel. The correct sequence is: target segment, risk carrier, product architecture, distribution architecture — and only then the regulatory route, which by that point largely answers itself.

---

Key points

• The licensing route is a derived decision, not a starting point. It follows from who carries the risk.
• DACH is not one market but three supervisory regimes. Germany and Austria are reachable via the EU passport. Switzerland is not.
• The "substitutive or not" product question determines the entire pricing logic — and whether an existing overseas product is transferable at all.
• German distribution is broker-dominated and gatekeeper-protected. Without a rating, a commission agreement and a BiPRO interface, your product does not exist.
• Partner dependency is the most underestimated risk. Fronting agreements without portfolio transfer rights lock you in for years.
• Realistic time to meaningful premium: 9–15 months in a partner model, 24–36 months with your own authorisation.

---

1. Why licensing is the wrong first question

Almost every first conversation with a foreign personal lines insurer looking at DACH contains the same sentence: "How do we get a BaFin licence?"

The question is understandable and it is misleading. It assumes that authorisation and market access are the same thing. They are not. Authorisation is permission to carry risk. Market access is the ability to reach customers, issue policies and settle claims in German, against German billing standards. Between the two sit twelve to eighteen months of operational work that no supervisor can accelerate or delay.

The practical consequence: answering the licensing question first locks in a structure before you know which product goes to which segment through which channel. Corrections afterwards are expensive — an established branch creates a permanent establishment, a granted licence ties up capital, a signed fronting agreement ties up the portfolio.

The point: Licensing is the shortest clock in the project plan. Distribution is the longest.

---

2. DACH is not one market but three regimes

"DACH" is a sales term, not a regulatory one. The three countries differ fundamentally on market access.

Germany

Supervisor: BaFin. Framework: Insurance Supervision Act (VAG), Insurance Contract Act (VVG), Trade Regulation Act (§ 34d GewO for intermediaries). For EU/EEA insurers the home state principle applies: business under freedom of services or through a branch is notified via the home supervisor (§§ 61 et seq. VAG), not applied for at BaFin. For third-country insurers, the opposite is true.

Austria

Supervisor: FMA, framework the Austrian VAG 2016. The passporting logic is identical; national requirements are not. Different contract law (Austrian VersVG), different disclosure requirements, different insurance premium tax rates and a substantially smaller, more concentrated broker market. A German notification does not cover Austria — it is a separate filing.

Switzerland — and the Liechtenstein bridge

Switzerland is neither EU nor EEA. The EU passport has no effect there. Writing direct insurance business in Switzerland generally requires a FINMA authorisation and a Swiss presence. FINMA interprets "carrying on business in Switzerland" broadly: actively approaching Swiss residents can already trigger the licensing requirement.

One structural point that is routinely overlooked: the Switzerland–Liechtenstein Direct Insurance Agreement (1996) gives insurers established in Liechtenstein facilitated access to the Swiss market. Because Liechtenstein is simultaneously an EEA member and therefore provides the EU passport into Germany and Austria, a Liechtenstein entity is the only structure capable of serving all three DACH countries from a single legal vehicle. Whether it works in a specific case depends on the line of business and the distribution model and must be confirmed with both supervisors — but it belongs on every longlist.

---

3. Five market access models compared

Three things this table does not show but that decide the case:

First — the third-country trap. Insurers from the UK, Switzerland, the UAE, the US or Israel have no passport. Either authorisation and a branch under §§ 67–68 VAG, or an EU subsidiary (typically Ireland, Luxembourg, Malta, the Netherlands) passporting onward, or a partner model on third-party paper. There is no fourth option. So-called correspondence insurance — where a German resident buys abroad on their own initiative — supports no business model, because it prohibits any active solicitation. Active marketing without authorisation constitutes unauthorised insurance business with supervisory and criminal consequences (§§ 306a, 308, 331 VAG).

Second — line separation. At EU level, Art. 73 Solvency II prohibits carrying life and non-life business in the same legal entity (subject to grandfathering). Germany adds a specific rule: a third-country direct insurer that writes health business alongside other lines cannot obtain authorisation for substitutive health insurance under § 146(1) VAG (§ 67(3) VAG). An international composite therefore has to design its DACH structure entity-by-entity and line-by-line from day one.

Third — FoS is not a distribution model. Freedom of services permits contract formation. It solves none of the operational problems: not German-language claims handling, not commission settlement, not the BiPRO interface, not a VVG-compliant application journey. FoS is the cheapest route in and the one where the operational effort is most routinely underestimated.

---

4. The product fork: substitutive or not

For personal lines insurers this is the single most consequential decision — and the one foreign carriers most often get wrong.

German private health insurance splits into two worlds:

Substitutive health insurance (§ 146 VAG) replaces statutory health cover in whole or in part. A closed rulebook attaches: life-assurance-style pricing, ageing reserves, unisex rating, participation in the standard tariff (§ 152 VAG), no ordinary right of termination for the insurer, an independent trustee for premium adjustments. An internationally priced, annually risk-rated product cannot be used here. That is not an adaptation project; it is a new build.

Non-substitutive cover — supplementary products, travel medical, expatriate and iPMI cover for individuals not in the statutory scheme, Severe Illness solutions — falls outside that regime. This is precisely why experienced international entrants almost always choose this corridor first.

The boundary is functional, not formal: what matters is whether the cover replaces statutory protection. An iPMI policy for a German-resident client outside the statutory system can drift into substitutive territory without the product design ever intending it. That assessment belongs before tariff development, not after.

Severe Illness and Critical Illness are not the same thing

A terminological blur with hard regulatory consequences:

• Severe Illness = cover for the treatment costs of serious illness. Systematically health insurance (medical expenses).
• Critical Illness = payment of a lump sum on diagnosis of a defined condition. Systematically a benefit product — life or personal accident, depending on design.

The two products address different needs, require different lines in the notification, attract different premium tax treatment and reach the market through different channels. Blending them in the concept means notifying the wrong line — and finding out at the first claim.

---

5. Distribution architecture: the real pacemaker

This is where DACH entries fail or double in length.

German personal lines distribution is intermediary-dominated. The large majority of new business runs through brokers, multi-tied agents and sales organisations, not direct channels. For an unknown foreign brand, direct-to-consumer is the most expensive option available: high acquisition cost, low trust, no portfolio leverage.

The gatekeepers you cannot route around:

The underlying mechanism: a German broker is liable for their selection decision. They therefore demand demonstrable evidence of the risk carrier's soundness — rating, financial strength, ability to stand behind the portfolio. An unrated foreign insurer with no German track record is a liability exposure, not a product. This is not prejudice; it is a rational response to the liability position, and it cannot be resolved by marketing. Only by structure: a rating, an established fronting partner, or a recognised reinsurer behind the paper.

In parallel, the intermediary side: own distribution activity in Germany requires a permit under § 34d GewO, registration in the intermediary register, a qualified responsible person ("broker in charge"), professional indemnity cover and documented continuing education. The permit process alone runs eight to twelve weeks — filling the responsible person role takes longer in practice, because the market for qualified candidates is tight. That position belongs in month 1 of the plan, not month 9.

---

6. Partner selection and operating model

Once it is clear that business will not start on own paper, partner selection becomes the single most important decision in the project.

Risk carrier / fronting partner. Assess: rating and capitalisation, appetite for the target line, fronting fee and retention, binding authority and its limits, reporting requirements — and above all the exit provisions. A fronting agreement without a contractual right to portfolio transfer or orderly migration makes changing carrier practically impossible. We regularly see structures in which the MGA is commercially successful after four years and strategically immobilised.

TPA and claims. For DACH personal lines this means concretely: German-language claims handling, familiarity with the German medical fee schedule (GOÄ) and hospital billing, direct settlement capability with providers, availability in Central European time. An English-language offshore claims centre produces complaints, ombudsman cases and lapses — regardless of how good the product is.

Data protection. Health data are special categories of personal data under Art. 9 GDPR. Every transfer to a TPA or reinsurer outside the EU requires a processing agreement, appropriate safeguards (standard contractual clauses) and a documented transfer impact assessment. For personal lines insurers this is not a side issue; it is a precondition of operational readiness.

Further governance roles to be filled before launch: money laundering officer (for life business), data protection officer, complaints management, and the product oversight and governance process under § 23(1a) VAG (POG/IDD).

---

7. A realistic timeline

The central argument of this article, in table form:

Every row shows the same pattern: the gap between regulatory clearance and commercial effect is consistently six to twelve months. That gap is distribution. It can only be shortened by running in parallel — product, IT, pool onboarding and rating alongside the authorisation process, not after it.

---

8. Seven mistakes that add twelve months

1. Licence first. The structure is fixed before target segment and channel are known.
2. Product copy-paste. The home product is translated rather than repriced — and fails on VVG disclosure requirements, withdrawal rights, policy wording and comparability.
3. Missing substitutivity. The cover drifts into § 146 VAG without the product design anticipating it.
4. Direct-channel assumption. A D2C model that works at home is transplanted into a broker-dominated market.
5. Claims as an afterthought. Claims capability is built after launch — and the first claims destroy the broker relationship.
6. Fronting without an exit. No portfolio transfer right, no termination mechanics, no data ownership.
7. DACH as one market. Austria treated as an appendix to Germany, Switzerland treated as EU. Each costs a full planning cycle.

---

9. The right decision sequence

The sequence we use to structure market entry projects:

Licensing sits at stage 5. Not because it is unimportant, but because it follows almost entirely from stages 1 to 4. Answer those four cleanly and stage 5 is usually already decided.

---

10. Regulatory outlook 2026/2027

Two developments belong in any entry plan with a 2027 horizon:

Solvency II Review. The amending directive was published in the EU Official Journal on 8 January 2025. German implementation runs through the Insurance Recovery, Resolution and Supervision Amendment Act (VSAAG); the Federal Ministry of Finance draft is dated 10 February 2026. The new rules apply from 30 January 2027, covering own funds requirements, reporting and proportionality — most relevant for models involving a own legal entity.

Recovery and resolution (IRRD). The same legislative package introduces preventive recovery planning requirements. For newly authorised entities this means additional governance work from day one.

Practical implication: if you start in 2026 and plan your own legal entity, build to the new regime from the outset rather than constructing under the old rules and retrofitting in 2027.

---

Frequently asked questions

About the author

Frank Reuter advises foreign personal lines insurers, MGAs and investors on market entry in the DACH region. Focus areas: international private medical insurance (iPMI), Severe Illness, TPA and claims operations, distribution architecture, and M&A in healthcare and insurance. He is a broker in charge under § 34d GewO, holds Prokurist and managing director roles in several international insurance and assistance structures, and takes on interim mandates at executive level.

Reuter Consulting, Munich · frank.reuter@reuterconsulting.com

From this series: Severe Illness topic page · Cost containment in international medical claims · Severe Illness programmes: the three load-bearing pillars

---

This article reflects the legal position as at September 2026 and is provided for general information. It does not replace legal or regulatory advice in individual cases.

---

---