What Cyber Insurance Requirements Apply in Wisconsin?

Wisconsin requires reasonable efforts to notify affected people within a reasonable time, no later than 45 days after the entity learns personal information was acquired without authorization, unless the no-material-risk exception applies. The definition includes unique biometric data and DNA profiles as well as familiar identity and financial credentials, so the data inventory can change whether this state’s response duties apply.

What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. Read the national Cyber liability guide.

What Should You Watch for With Cyber Insurance in Wisconsin?

  • Wisconsin Names Biometrics and DNA

    Wisconsin includes unique biometric data such as fingerprints, voice prints, retina or iris images and other unique physical representations, plus a DNA profile, when linked with the person’s name and not publicly available, encrypted, redacted or otherwise unreadable. Ask your incident team to check biometric and genetic repositories as well as the usual account and identity fields. 1,2

  • The 45-Day Clock Starts When the Entity Learns of Acquisition

    Notice is due within a reasonable time, no later than 45 days after the entity learns of the unauthorized acquisition; reasonableness considers how many notices are needed and available communication methods. Ask who owns the date-of-knowledge record and how the incident vendor will document any claimed law-enforcement delay. 1

  • One Thousand Notices Adds Credit Agencies

    A single incident that requires notice to 1,000 or more individuals also requires notice to all nationwide consumer-reporting agencies without unreasonable delay. Ask who tracks the Wisconsin count and sends this separate filing; Wisconsin’s cited statute does not create a routine Attorney General filing at that threshold. 1,2

  • Some Compliant Regulated Entities Use a Different Rule

    Wisconsin §134.98 exempts entities subject to and complying with specified federal financial privacy and security requirements if they have a breach policy, and compliant HIPAA entities. Ask whether the party holding the affected information qualifies for an exemption before applying this state notice timeline; the exemption depends on both regulatory status and compliance. 1,2

Which Cyber Insurance Providers Have Wisconsin License Records?

These providers publish a national listing for Cyber liability; the license records below name the licensed entities and roles. Some records rely on company-reported information rather than independent regulator verification. A national listing does not confirm the product is available in Wisconsin. Check the regulator’s license lookup and confirm state availability for your business when requesting a quote.

  • At-Bay

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    At-Bay Insurance Services LLC

    At-Bay’s license page lists P&C producer and surplus-lines broker license numbers for all 50 states and the District of Columbia. These are company disclosures and do not establish product availability in each jurisdiction. 8

    At-Bay offers primary and excess cyber insurance for businesses with revenue up to $5 billion.

  • Coalition

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    Coalition Insurance Solutions, Inc.

    Coalition’s license page lists producer and surplus-lines licenses for Coalition Insurance Solutions, Inc. in all 50 states and the District of Columbia. The page separately lists insurers; this record covers the brokerage entity only. 9

    Coalition offers cyber insurance.

  • Corgi

    Insurance producer · checked 2026-09-28

    Corgi Insurance Services, Inc.

    Corgi’s company producer-license table lists 50 jurisdictions: 49 states and the District of Columbia, including DC license 3003091619. New Mexico does not appear in the table and is not included here; the omission does not establish that Corgi is unlicensed there. The company-reported table has no stated as-of date and does not establish product availability. 10

    Corgi lists cyber insurance among its business insurance offerings.

  • Hiscox

    Insurer · checked 2026-09-28

    Hiscox Insurance Company Inc.

    Hiscox’s U.S. company information states that Hiscox Insurance Company Inc. is licensed in all 50 states and the District of Columbia. This is company-reported insurer authority for this entity and does not establish which company issues every Hiscox-branded product. 11

    Hiscox offers cyber insurance for small businesses.

  • TechInsurance

    Insurance producer · checked 2026-09-28

    Specialty Program Group LLC

    TechInsurance’s current licensing page names Specialty Program Group LLC / SPG Insurance Solutions and lists state license numbers, but labels Rhode Island “Individual licenses” rather than identifying a license for the named agency. RI is omitted because this disclosure does not establish agency authority there; this is a search limitation, not an assertion that the company is unlicensed. The remaining state entries are company-reported and are not an insurance product availability map. 13

    TechInsurance arranges cyber insurance for small businesses.

  • Vouch

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    Vouch Specialty Insurance Services, LLC

    Vouch’s licenses page, effective January 16, 2025, lists producer licenses in all 50 states and DC. Its separate surplus-lines table includes Idaho number 870820, while a footnote says Georgia and Idaho do not issue agency-level surplus-lines licenses. Because those statements conflict for Idaho, this record keeps Idaho producer-only and does not treat the table number as established agency surplus-lines authority. The page is company-reported and does not establish product availability. 14

    Vouch lists cyber liability in its technology-company programs.

Who Regulates Insurance in Wisconsin?

Wisconsin Office of the Commissioner of Insurance

The Wisconsin Office of the Commissioner of Insurance administers Wisconsin insurance laws, oversees insurers and insurance producers within its authority, and provides regulatory and consumer resources. You can use the department's complaint process to raise an insurance issue and its licensing resources to check insurance professionals. 3,4,5

Surplus-Lines Tax and Stamping Office in Wisconsin

Reported tax rate. 3% of premium 6,7

The NAIC's state chart lists a 3% of premium charge for surplus-lines coverage for Wisconsin (the chart's state entries were reviewed in October 2025). Your broker may collect the applicable amount with the premium. Surplus-lines insurers are not licensed in the state and generally are outside state guaranty-association protection; ask your broker to explain the insurer's financial protections and any diligent-search requirement that applies to your placement.

What Should You Ask Before Buying Cyber Insurance in Wisconsin?

  1. Does the affected data include a Wisconsin-defined DNA profile or unique biometric identifier linked to a person’s name?
  2. Who records when the entity learned that personal information was acquired without authorization?
  3. If the single-incident Wisconsin count reaches 1,000 people, who alerts all nationwide consumer-reporting agencies?
  4. Does the specific entity qualify for Wisconsin’s GLBA or HIPAA exemption, and what evidence supports that status?

Cyber Insurance in Wisconsin: Frequently Asked Questions

How long does a Wisconsin business have to send breach notices?

Within a reasonable time, no later than 45 days after the entity learns of the unauthorized acquisition, subject to a qualifying law-enforcement request. 1

Does Wisconsin’s breach law cover biometric data?

Yes. It includes unique biometric data such as fingerprints, voice prints, retina or iris images, and other unique physical representations when linked with a person’s name and not rendered unreadable. 1,2

Does Wisconsin require credit-bureau notice after a large breach?

Yes. If one incident requires notices to 1,000 or more people, the entity must notify all nationwide consumer-reporting agencies without unreasonable delay. 1

Cyber Insurance Guides for Other States

Other coverage in WisconsinEvery coverage guide for Wisconsin, plus the regulator and surplus-lines details.

Updated .

This guide is informational and does not determine whether a policy is available or meets your needs. Editorial policy. To suggest a correction, contact Spot with a supporting source.

Get Help With Insurance Buying and Renewals.

Get help buying coverage and managing renewals, with less paperwork for your team. Create your account and submit an insurance request online.

Talk to Spot