Two developers reviewing code together on large monitors in a bright office

Privacy and third-party liability, defended properly.

After a breach, the claims and investigations can arrive months later. This section covers defence costs, damages and regulatory investigation costs arising from privacy and data-protection failures.

How this cover works

What it covers

Defence costs and damages for claims alleging failure to protect personal or confidential information, and costs of responding to regulatory investigations. Fines and penalties only where insurable by law. [TODO: confirm]

When it responds

When a claim or regulatory investigation is first made against you during the policy period and notified as required by the policy wording.

What we look at

Volumes and types of personal information processed, POPIA compliance maturity, third parties who process data for you, and contracts with clients.

Typical scenarios

Regulator enquiry

Following a breach notification, the Information Regulator opens an assessment and requests detailed information about your security measures.

Data subject claims

Customers whose information was exposed bring claims for damages, alleging the business failed to take appropriate security safeguards.

Client contract claim

A corporate client alleges that a breach of its data at your firm breached your data-processing obligations.

Controls that matter here

These are the controls that most influence our terms for this section of cover. Missing one doesn't automatically mean no cover. It means we'll talk about it, and explain the effect on your terms.

  • POPIA compliance programme with a registered Information Officer
  • Operator agreements with suppliers who process personal information
  • Data minimisation and retention schedules
  • Access controls and monitoring on systems holding personal information

See all the controls we look for

Common questions.

[TODO: confirm whether media/content liability is included or available as an extension].

See how your controls shape your terms.

Start a Cyber Risk Check for a clear view of your exposure and what this cover could look like for you.

Get a Cyber Risk Check

Cover is subject to underwriting acceptance and to the terms, conditions, limits, sub-limits, deductibles and exclusions in the policy wording. [TODO: link to policy wording / product summary]