Quickly emerging as the new-product darling of the Property and Casualty insurance industry is Cyber Liability insurance. Although the Sony PlayStation Network (PSN) incident is the most notable recent hack of customer data, the Privacy Rights Clearinghouse (PRC) catalogs 2,451 data breaches made public since 2005 exposing 598,410,625 customer or employee records to unauthorized users.
The Clearinghouse is particularly useful for making available not just hacking information but a taxonomy of breach types that can help organizations identify the exposures their organizations need to pay particular attention to.
Insurance response to this taxonomy is varied, with some breach types covered by traditional insurance, e.g. credit card fraud (CARD) or the disclosure of information by someone with legitimate access to the information (INSIDER) while others are the subject of a relatively new and rapidly evolving insurance coverage type often lumped under the rubric of "Cyber Risk". The traditional insurance responses are certainly evolving as well, witness the Hartford Insurance Company Employee Data Privacy Liability Endorsement which can be made part of at least their Private Choice Encore! policy.
Insurance products appear to fall into two major "buckets", Network Security and Privacy that can provide first-party and third-party coverage. Also, critical to any Cyber Risk policy is the provision of crisis management services and generous limits of liability available to respond to violations of privacy regulations to include notification and credit monitoring.A summary of state security breach laws can be found here.
Network Security concerns itself with liability to a third-party for the destruction, deletion or corruption of their data caused by the failure of an organizations network security to protect such third-party data. This concerns not just third-party data that an organization might have on it servers but also (and more prominently) the potential introduction of a virus or other malicious code in the exchange of data between two organizations through the simple commercial internet access each has to the others data.
Privacy Liability gets the most press since it deals with the liability to third parties as a result of the organization's failure to properly safeguard personally identifiable information or to safeguard information that is protected under a nondisclosure agreement. It is in Privacy Liability type instances where the crisis management benefit of any policy comes into play. No matter how experienced an organizations in-house public relations staff is, they may never have had to deal with the media crush that attends any well-known organizations loss of customer or employee personal information. Crisis management provides not only money but also services for the purposes of, ultimately, safeguarding the reputation of the organization through public relations activities.
The concern for the property damage and third party liability associated with mold or fungus has been the focus of new insurance policy exclusions in recent years. Damage related to Exterior Insulation and Finish Systems (EIFS) i.e. synthetic stucco is a standard exclusion in all liability policies today.The deterioration of this building product has resulted in structural damage from moisture infiltration and growth of mold.
court decision, that dogma may no longer carry the same weight but it is still, with some modification, the preferred policy language.
publications, is availability of significant coverage enhancements for purchasers of Not-for-Profit (“NFP”) D&O insurance.
I am sure in the 1960's TV show
Kidnap and Ransom (K&R) insurance policies typically indemnify the policyholder for the costs involved in the evacuation or relocation of insured persons in the event of:
Most business interruption policy forms will include extra expense coverage to the degree it reduces the business interruption loss. One might think that with this built in coverage there is no need for additional extra expense coverage. Not so. Let's assume a retailer has a fire and incurs cost to temporarily lease another location and for additional advertising expenses. When it comes time to settle the business interruption loss with the insurance adjustor (read forensic accountant here), he will look at subsequent sales when the retailer is back in business. If sales increased by 10% due to an improved economy, the case will be made that the retailer made up the lost sales thereby disallowing the extra expense incurred because it did not reduce the loss of income.