How is data on injured parties handled?

“As a special category under Article 9 of the GDPR: isolated from the rest of the claim file, outside any policy-based permission, and shared only with the explicit, case-by-case consent of the data subject, or with the specific legal basis that applies to the insurer.”