16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Cyber liability splits into first-party coverage (the insured's own costs: breach response, notification, business interruption, cyber extortion/ransomware) and third-party coverage (liability to others for the breach); most cyber policies are claims-made.
- Aircraft coverage is built from hull (physical damage, often distinguishing in-motion from not-in-motion) and liability, which separates bodily injury, property damage, and passenger liability; aviation is excluded from standard auto and CGL forms.
- Excess and surplus lines (E&S) insurers write hard-to-place risks not available in the admitted market; they are non-admitted, not backed by state guaranty funds, and require a diligent-search/broker affidavit before placement.
- Difference in Conditions (DIC) policies fill gaps in primary property coverage, commonly adding flood and earthquake; equipment breakdown (boiler and machinery) covers sudden mechanical/electrical breakdown excluded by property forms.
- Directors and officers (D&O), employment practices liability (EPLI), and professional liability (E&O) are management/professional lines written claims-made; specialty lines fill the gaps standard package policies leave open.
Cyber Liability Insurance
Standard property and CGL forms were written before data breaches existed and largely exclude electronic data losses and breach liability. Cyber liability policies fill that gap and split, like most liability lines, into first-party and third-party halves.
Quick Answer: First-party cyber = the insured's own costs after a breach. Third-party cyber = the insured's legal liability to others harmed by the breach.
| Coverage Half | What It Pays |
|---|---|
| First-party | Breach response/forensics, customer notification, credit monitoring, data restoration, business interruption, cyber extortion/ransomware payments, public relations |
| Third-party | Liability for failure to protect data, regulatory fines/penalties (where insurable), media/content liability, defense costs |
Most cyber policies are written on a claims-made basis, meaning the claim must be made during the policy period (and reported per the policy), with a retroactive date limiting how far back triggering acts may reach. A ransomware event typically triggers first-party cyber extortion coverage, often subject to a sublimit and a waiting period.
Worked Example: First-Party vs. Third-Party Cyber
A retailer suffers a breach. It spends $80,000 on forensic investigation and customer notification and loses $120,000 in net income while its systems are down. Separately, affected customers sue the retailer for $500,000, alleging it failed to safeguard their data. The $80,000 and $120,000 are first-party losses (the insured's own breach-response and business-interruption costs). The $500,000 lawsuit is a third-party liability claim defended and indemnified under the third-party insuring agreement. A policy without third-party coverage would pay the $200,000 first-party costs but leave the lawsuit uninsured.
Aviation Insurance
Aircraft exposures are excluded from personal auto, business auto, and CGL forms, so dedicated aviation policies are required. An aviation policy is built from two components familiar from auto:
- Hull coverage - physical damage to the aircraft. Forms often distinguish loss in motion (under power, taxiing, or in flight) from loss not in motion (parked/moored), because in-motion losses are more severe and may carry different deductibles.
- Liability coverage - separates bodily injury (excluding passengers), property damage, and passenger bodily injury into distinct limits. Passenger liability is broken out because passengers are a uniquely concentrated, high-severity exposure.
A related concept is the admitted seaworthiness/airworthiness warranty: the aircraft must hold a valid airworthiness certificate and the pilot must meet the named-pilot or open-pilot warranty (minimum ratings/hours) or coverage may not apply.
A charter aircraft is destroyed in a crash that injures three paying passengers and a person on the ground. Which aviation coverage component responds to the injuries of the paying passengers?
Excess and Surplus Lines (E&S)
When a risk is too unusual, too large, or too hazardous for the admitted (licensed, rate-and-form-filed) market, it goes to the excess and surplus lines (E&S) market. Key exam facts:
- E&S insurers are non-admitted in the state and are not regulated for rate and form the way admitted carriers are, giving them flexibility to write hard-to-place risks.
- Policyholders of non-admitted carriers are NOT protected by the state guaranty fund if the insurer becomes insolvent.
- A risk may be placed in surplus lines only after a diligent search/declination of the admitted market (often documented by a broker affidavit and a set number of admitted-carrier rejections).
- Surplus lines business is placed through a licensed surplus lines broker who is responsible for collecting and remitting the surplus lines premium tax.
The insurer should still be a financially solid, eligible non-admitted carrier (commonly listed by the NAIC or on a state's eligible/white list).
Property Gap-Fillers: DIC and Equipment Breakdown
Difference in Conditions (DIC)
A DIC policy is a separate, broad open-peril contract that fills gaps left by an insured's primary property coverage. It most commonly adds the perils standard forms exclude - flood and earthquake - and broadens coverage to all-risk where the primary is named-peril. The DIC sits beside (not over) the primary policy and does not duplicate covered perils.
Equipment Breakdown (Boiler and Machinery)
Property forms exclude loss caused by mechanical or electrical breakdown, explosion of steam boilers, and artificially generated electrical current. Equipment breakdown coverage (historically "boiler and machinery") fills that gap, paying for sudden and accidental breakdown of pressure vessels, electrical systems, HVAC, and production machinery, including resulting business interruption and spoilage. A unique feature is the insurer's loss-control inspection service of insured objects.
Management and Professional Liability Lines
Three claims-made lines round out a modern commercial program and frequently appear as specialty-line exam items:
- Directors and Officers (D&O) - protects corporate directors and officers (and often the entity) against claims of wrongful acts in their management capacity (mismanagement, breach of fiduciary duty). CGL excludes these management wrongful acts.
- Employment Practices Liability (EPLI) - covers wrongful-employment claims: discrimination, harassment, wrongful termination, and retaliation. The CGL's bodily-injury/property-damage trigger does not reach these.
- Professional Liability / Errors and Omissions (E&O) - covers liability arising from rendering or failing to render professional services (medical malpractice, legal malpractice, agent E&O). It responds to economic loss from professional error, which the CGL excludes.
Common Exam Traps
- Cyber halves. First-party = your own costs; third-party = liability to others.
- Claims-made. Cyber, D&O, EPLI, and E&O are typically claims-made with retroactive dates - not occurrence.
- Aviation is excluded from auto/CGL and needs its own policy; passenger liability is a separate limit.
- Non-admitted = no guaranty fund. Surplus lines buyers lose guaranty-fund protection.
- DIC adds flood and quake; equipment breakdown covers mechanical/electrical/boiler failure the property form excludes.
A manufacturer's risk is rejected by several admitted insurers and is finally placed with a non-admitted surplus lines carrier, which later becomes insolvent before paying a large claim. What is the policyholder's position regarding the state guaranty fund?