Protects your business against the costs of a data breach, ransomware attack, or system outage — from forensic investigation and legal costs through to lost income while systems are down.
🤝 Partnerships launching soon
Cyber insurance responds to the direct and indirect costs of a cyber incident — not just the technical fix, but the legal, reputational and operational fallout.
Data protection law creates real obligations and real financial exposure — regardless of business size.
Under UK GDPR, most personal data breaches likely to risk individuals' rights must be reported to the ICO within 72 hours of becoming aware of them — a tight window that makes a rehearsed incident response, not just a policy, genuinely valuable.
The ICO can fine organisations up to £17.5 million or 4% of global annual turnover (whichever is higher) for the most serious UK GDPR breaches. While the fine itself is generally uninsurable, legal defence costs during an investigation typically are covered.
The government-backed Cyber Essentials certification scheme is increasingly requested by insurers and larger clients alike — holding it can reduce premiums and is worth pursuing alongside cover, not instead of it.
Larger clients increasingly require suppliers to hold cyber insurance and demonstrate basic security controls as a condition of doing business — a growing reason SMEs are asked for proof of cover even when they see themselves as a low-profile target.
The right limit depends on how much data you hold, your turnover, and your reliance on IT systems to trade.
A common starting point for small businesses with limited customer data and modest IT dependency.
Typical for SMEs holding customer payment details or operating primarily online.
Often appropriate for businesses holding sensitive personal data at scale, or with significant supply-chain exposure.
Common for larger businesses, healthcare providers, and technology firms processing data on behalf of clients.
A few things worth checking before you buy, whichever UK insurer or broker you compare.
Look for policies that provide access to a pre-appointed incident response team — forensics, legal and PR — rather than just a payout after the fact. Speed matters within the 72-hour ICO notification window.
Cyber cover is typically written on a claims-made basis — check the policy is live (or a valid extended reporting period applies) when a claim is made or a breach is discovered.
Check exactly what's covered around ransomware — many insurers now restrict or exclude ransom payments, reflecting sanctions risk and government guidance discouraging payment.
Before buying, confirm any insurer or broker is authorised and regulated by the Financial Conduct Authority — check the register at register.fca.org.uk.
🤝 We're finalising partnerships with FCA-authorised UK insurers so you can compare real quotes here soon. Check back shortly, or get in touch if you'd like to be notified when comparisons go live.
Explore related cover types in our commercial insurance knowledge base.
Compare from leading UK insurers. Free, fast and no obligation.