Cyber liability and data security insurance
For all commercial clients - and especially those operating in the technology field - cyber exposures, together with data security and privacy concerns have become business-critical risks.
The insurance industry has been quick to respond to the ever-increasing focus on cyber and data protection through the provision of a variety of policies covering a range of risks from first party losses to liabilities following a loss or theft of data.
Our experienced team of data, technology and insurance lawyers are perfectly placed to advise insurers and intermediaries on all aspects of cyber and data insurance.
What we do
- Policy wordings – we have drafted leading cyber liability policies for a number of insurer clients, including cyber ransom policies, combined cyber and data policies and cyber extensions to personal lines household products. We have also worked with insurers to update suites of policy wordings and associated documents to ensure compliance with their silent cyber obligations.
- Breach response – following an insured breach, our experienced team are able to quickly and efficiently investigate and respond to the breach whilst ensuring that legal professional privilege remains in place. Our team includes experts in data protection, insurance coverage, technology disputes, employment law and commercial disputes, ensuring all possible issues are covered off.
- Claims support and advice – we are experienced in supporting claims teams on matters such as: liaising with brokers and insureds to collate claims information, managing the instruction of foreign counsel and experts; and reporting on matters relating to coverage.
- Training – we regularly provide training to insurers and intermediaries on issues relating to cyber and data insurance, including compliance with silent cyber requirements.
London Market insurer
Advising a London Market insurer on silent cyber compliance across a suite of over 1,000 policy wordings and associated documents.
Cyber policy wordings
Drafting a variety of cyber policy wordings for a number of insurers across various lines of business, including marine cyber and cyber K&R.
Board of a leading insurer
Advising the board of a leading insurer on its silent cyber strategy.
London Market insurer’s claims team
We have supported a London Market insurer’s claims team to enable it to determine coverage in relation to over 200 specialty risk claims.
You may be interested in...
CyberCube’s Global Threat Outlook: The evolving threat of cyber operations
A new digital safe space – How does the EU Digital Services Act affect insurers?
“TOBA traps” - general exposure risk under existing TOBAs
UK Government publishes the Online Safety Bill: an overview
The rising number of cyber-attacks
The continued threat of piracy in Southeast Asian waters
Government publishes its proposals for expanding the Scope of the Network and Information Systems Regulations 2018
‘Big Game Hunting’ – the new face of cyber extortion?
Economic crime and cybercrime
It is clear that the digital landscape, often termed cyberspace, is a man-made environment, in which human behaviour dominates and where technology both influences and aids our role in it — through the internet, telecoms and networked computer systems, which are often interdependent. The extent to which any organisation is potentially vulnerable to cyber-attack depends on how well these elements are aligned.
Let’s be direct – doubly so
The Ukraine War: Aviation and cyber issues
The physical consequences of cyber attacks
ICO consultation on research provisions guidance
The data protection legislation (namely, the UK GDPR and Data Protection Act 2018) contain various provisions that deal with the processing of personal data for research purposes.
More good news for data controllers: High Court finds local authority not vicariously liable for the actions of social worker who went off on a "frolic of her own"
Stemming the tide of data breach claims: good news for data controllers
The cases summarised give considerable comfort to data controllers seeking to defend themselves against claims that relate to breaches arising as a result of a failure rather than a direct act and/or are based on assertions of damage or distress that are exaggerated, unsubstantiated or bear little relation to the breach itself.
Confidential information and subject access disclosure
In February 2021, the High Court handed down judgment London Borough of Lambeth v AM (No. 2)  EWHC 186 (QB), in which Browne Jacobson LLP acted for the Claimant Council. The judgment is critical reading for public bodies who are required to take action to restrict the use of confidential information in circumstances where that information has been inadvertently disclosed to a third-party.
Top tips for implementing ‘Data Protection by Design & Default’
The GDPR requires all businesses to implement ‘Data Protection by Design & Default’ but what does that mean in practice and how can businesses practically comply?
Protecting your business from cyber threats
Did you know that cyber attackers can use publicly available information about your business and employees to make their attacks more successful? Information is often gleaned from websites and public social media accounts.
Legal and regulatory monthly update - September 2019
The latest update covering delegated authority, insurance product development, the senior insurance managers regime, data protection, operational control frameworks, Lloyds market, and horizon scanning.