data breach insurance policy

With the technological advancement, the inherent risk of a data breach has increased tremendously and has become more challenging to resolve.

To tackle the threat posed by the data breach, an appropriate data breach insurance coverage is the need of the hour. The use of continues internet connection by businesses due to online interactions has made them more vulnerable to cyber-attacks. Hence the best way to protect the vital data is by having a secure data breach insurance policy.

Data breach insurance helps cover the costs of a data security breach for identity protection, public relations, legal fees, and liability depending on the coverage that a business adopts. The data breach coverage helps to take quick action to restore the public’s confidence.

This policy provides access to professional assistance to help businesses comply with the required laws and regulations and also mitigate the risk of civil litigation and other penalties when a data breach occurs.

Who should get a data breach insurance policy?

  • Businesses who continuously send and receive documents electronically
  • Firms who carry out online promotion via social media and other websites should have a professional indemnity insurance
  • Enterprises communicating with customers via emails, text and social media on regular basis
  • Businesses having massive data stored on their computers
  • Having critical data such as customer information, accounting records, tax documents, and trade secrets and much more
  • Data belonging to other parties such as customers or service providers or vendors should be secured with the help of a professional indemnity insurance
  • Online companies selling services and products

What does data breach insurance cover?

  1. First-party liability: It covers the following losses sustained by a business:
  • Legal and forensic service expenses, which includes the costs involved in any investigation related to the breach of records
  • Crisis management and notification expenses, which consists of the expenses involved in informing customers of the violation to their records as well as other response management costs
  • Good faith advertising expenses, which includes the costs involved in ad campaigns to announce the breach to your records
  1. Third-party liability, which covers the business’s liability to its customers

It includes all the expenses combined, resulting from lawsuits from customers, as well as the cost of any other legal actions taken against the affected company.

Read more: What do you mean by breach of confidential information?

How data breach insurance helps?

Data breach coverage under professional indemnity insurance, provide businesses with expert advice that ensures:

  • The company complies with all the regulatory requirements
  • The business is suitably guided on preventing data breach
  • The firm can handle any breach in the data if it occurs in the future

Finally,

The data breach insurance pays for following expenses:

  • Help the business to find who was affected by the breach and ways to notify them
  • Affected individual’s credit monitoring
  • Identity restoration case management for the victims of identity theft
  • Carries the legal review of notification obligations
  • Cost involved in preparation of the notification letters
  • Toll-free helpline

Case Study:

Renuka Shah, an employee of a financial services company, was attending a conference in Bengaluru on behalf of her employer. During her stay for the conference, her laptop was stolen.

Read more: How does Professional Indemnity Insurance Benefit the IT Firms?

The personal information for the clients including their social security numbers was stored on that laptop, and hence Renuka immediately contacts her employer to report the theft.

Renuka thought that since the laptop was password protected, her clients’ personal information will not be at risk. Unfortunately, the data stored was never ‘encrypted’ by her.

Ultimately the data breach took place, and after receiving a report of the alleged theft, Renuka’s employer immediately contacted their insurance company to report this incidence of a data breach.

Fortunately, they had recently purchased data breach insurance coverage, and after gathering facts about the incident, the insurance company’s representative contacted the forensic services to investigate the loss. The following services were triggered:

  • Investigating the loss which included the use of forensic services
  • Providing counselling services to the company on data breach
  • Mailing the notification letters to breach victims
  • Providing credit monitoring services for the breach victims

The insurance company covered the cost of 2, 80,000 rupees for notification expenses and credit monitoring services. It also covered for the forensic expenses of 50,000 rupees.