The records were never yours. The liability is.
Privacy and network security liability is the third-party half of a cyber policy, and it answers for what you owe other people after their information is exposed. It covers the claims, the defense costs and the regulatory response that follow a breach of data you were holding.
Tell us the situation.
One licensed human replies the same business day — not five agents, not an auto-responder. If the policy you have is already the right one, we will tell you.
We use this to quote and service your insurance, and we do not sell it or pass it to lead networks. Privacy policy.
Send us what you have. We’ll tell you if it’s right.
Your current policy paperwork, a renewal notice, or nothing at all. A licensed agent reads it and replies the same business day.
What privacy and network security liability actually covers.
Privacy liability
Claims from people whose personal information you held when it was exposed, including defense costs.
Without it — The people in your database bring the claim, and the defense is paid from working capital before anyone decides who was at fault.
Network security liability
Claims that a failure of your systems caused harm to someone else, such as passing malware to a client or losing their data.
Without it — A client whose operation stopped because of your systems has a direct claim and nothing responding to it.
Regulatory defense and penalties
The cost of responding to a regulator after a breach, and fines where the law allows a fine to be insured.
Without it — An investigation runs on your own legal budget for as long as it takes, whatever it eventually concludes.
PCI fines and assessments
Card brand fines and assessments passed down through your processor after card data is compromised.
Without it — The processor deducts the assessment from settlement, so the money is gone before the dispute begins.
Media liability
Claims over content you published, such as infringement or disparagement in your own material.
Without it — A takedown demand becomes a lawsuit with no defense funding behind it.
What clients with privacy and network security liability ask us.
Is privacy liability the same as cyber insurance?
It is one half of it. A cyber policy is built from first-party coverages that pay your own losses and third-party coverages that pay what you owe other people, and privacy liability sits firmly in the second group. A policy that carries strong privacy liability can still leave you funding your own recovery, because that is the other half.
We do not hold credit cards. Do we still have a privacy exposure?
Almost certainly. Names with email addresses, dates of birth, health information, employee files and driver records all trigger notification duties in most states, and none of them involve a card number. The card data question decides whether PCI assessments are in play, not whether you have a privacy exposure at all.
Our data is all with a cloud vendor. Does that move the liability?
It moves the technical control and not the duty. The people whose information it is generally have their claim against the business they gave it to, which is you, and your contract with the vendor governs whether you can recover from them afterwards. Recovering from a vendor is a separate and slower fight than answering the claim in front of you.
Are regulatory fines actually insurable?
The defense costs usually are. The fine itself is insurable only where the law of the relevant state permits it, which varies, and policies word this carefully as a result. A policy that promises to pay fines "where insurable by law" is being accurate rather than evasive.
Does privacy liability cover personal data our AI tools process or train on?
It covers the claims that your business collected, retained, used or disclosed personal information wrongly, whether by a breach or by design, and an AI model that trains on customer data, keeps prompts or surfaces one person’s information to another produces exactly that claim. What varies is whether the form treats an AI system as a system, which the affirmative AI endorsements from carriers like Coalition make explicit. For health information the claim also turns on a business associate agreement covering every model in the chain.
Commercial insurance is 96% of what we do — it is not a department here, it is the whole business. Not ready to talk? The guides answer the questions this page raises in more depth. Already insured with us and need a certificate or a policy change? Ask the service team rather than starting a quote — it is faster and it goes to the people whose job it is. We also write home and auto, which is usually cheaper alongside the business policy than apart from it.
Handed a lease, a vendor packet or a client contract with insurance requirements? Paste it into the COI Requirements Decoder to see what each one means for your business, or read what the requirements mean.