Does Cyber Insurance Cover Regulatory Fines?
Sometimes—a cyber policy may cover defense of a regulator inquiry and penalties that are insurable under applicable law; it does not guarantee every fine is payable.
FTC guidance lists fees, fines, and penalties among possible cyber first-party costs, while Chubb limits its stated fine coverage to amounts insurable by law. This does not mean every regulator action or fine is covered, or that defense and indemnity share the same limit.
Read the regulatory-proceeding coverage grant, definition of covered loss, and any “insurable by law” language. Check whether defense costs reduce the aggregate, whether there is a separate sublimit, and whether the policy excludes penalties arising from deliberate violations or prior conduct. Identify which regulator and jurisdiction are involved, then ask counsel about insurability. Keep contractual assessments separate from government-imposed fines when reviewing the claim.
