Preview any coverage

Make this coverage review specific to your business

Incident response and liability to others should be compared separately.

Prepare these details

Data types, systems, backups, access controls and service providers.

Ask before accepting a proposal

Which response costs and third-party claims are included, and who must be contacted?

Start my business enquiry →

Hypothetical situation

A security incident interrupts access to business systems.

Ask which wording, conditions and notification requirements would apply. A scenario does not establish coverage or guarantee an outcome.

Home / Business Insurance / Knowledge base / Cyber Liability
Liability

Cyber Liability (Cyber)

Covers breach response, third-party liability, ransomware, business interruption from a cyber event, and privacy regulatory exposure.

20%
What could a lower premium mean for you?Illustrative example: $2,400 → $1,920 per year is $480 less. Not an available offer. Try your own numbers →
Your next step starts hereNo obligation to buy

Choose your insurance type and continue to the contact options. This step does not submit an application.

Insurance Genie wearing a tailored business vest
Prepare for digital risks.Discuss systems, data and operations
Response and recovery.Review cyber cover and policy conditions
Live examples
CRM examples will appear here once the feed is connected.

From Insurance Genie

Recent business insurance purchases

Explore recent policy purchases shared through our participating insurance professionals.

Recent policies will appear here when the Insurance Genie CRM feed is connected.

Who needs it

Anyone holding personal information or dependent on systems to trade. In practice, everyone.

Illustration of a laptop, server, padlock and a blue protection shield

What it does not cover

It does not fix bad controls. Insurers increasingly decline rather than rate for missing multi-factor authentication.

Canadian wording

Where the Canadian form differs.

PIPEDA and provincial privacy statutes drive the Canadian regulatory piece, not US state breach-notification law. Quebec’s Law 25 adds obligations the US framing misses entirely.

Also calledCyber, privacy liability, data breach insurance

At a glance

Canonical nameCyber Liability
AbbreviationCyber
How it is boughtStandalone
CategoryLiability
Typical limitsRange only, with the basis stated — Canada publishes no commercial tariff

Limits are written to the exposure and to what your contracts demand, not to a rule of thumb. Any page quoting a single “standard” limit for a class of business is quoting one broker’s habit.

Know what you need. Now get it priced.

One request, and someone licensed to place this coverage picks it up.

Is this the wording my policy actually uses?
Not necessarily. Canada has no single mandated commercial wording the way the US has ISO. The IBC form is the reference; many Canadian insurers write their own manuscript wordings derived from a mix of IBC and ISO. Where we describe the IBC form we say so, and the only authority on your coverage is your own policy document.
How much does this cost?
We publish ranges with the basis stated, never a single figure. Commercial premiums are driven by class, revenue, payroll, claims history, limits and the market cycle. A page quoting one number for a whole class of business is quoting a habit, not a market.
My contract demands this. How fast can I get it?
For most standard coverages, same day to a few days. Bonds and specialty lines take longer because they are underwritten individually. If you have a deadline, say so at the start of the request rather than at the end.
Does Insurance Genie sell this?
No. InsuranceGenie.ca is not a brokerage or an insurer. We explain the coverage and connect you with an appropriately licensed organization that can quote and place it, and we name them before your details are shared.

Be prepared

Claims scenarios: what happens next?

Hypothetical situations to help you prepare questions—not actual client claims or promises of coverage.

Illustration: a business account is compromised

A business account is compromised

Scenario: An attacker gains access to a business email account.

What happens next: Contact the approved incident-response channel promptly. Preserve evidence and follow policy notification requirements.

Illustration: systems are unavailable

Systems are unavailable

Scenario: A malicious incident interrupts access to business systems.

What happens next: Document the interruption and recovery costs. The insurer checks the trigger, waiting periods and selected cyber benefits.

Illustration: customer data may be exposed

Customer data may be exposed

Scenario: The business discovers possible unauthorized access to customer information.

What happens next: Seek appropriate incident-response and legal guidance. Notification duties and insurance response require separate assessment.

Actual outcomes depend on the facts and applicable wording. Read claims guidance · Ask about the next step