16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Cyber liability splits into first-party (the insured's own data, business interruption, extortion) and third-party (liability to others) coverage, usually written claims-made.
- Aviation insurance separates hull (physical damage) from liability, with admitted (passenger) and non-admitted (guest) bodily injury distinctions.
- Inland marine covers property in transit and floaters; ocean marine has four parts: hull, cargo, freight, and protection & indemnity (P&I).
- Umbrella/excess policies sit above primary limits and may drop down to fill gaps subject to a self-insured retention (SIR).
- Specialty lines are typically written on a non-standard or surplus-lines basis when standard markets decline the risk.
Cyber, Aviation, and Other Specialty Lines
Specialty lines cover exposures that standard ISO commercial forms exclude or under-serve. They are frequently written on non-admitted (surplus lines) paper through wholesalers when admitted carriers decline the risk. The exam tests the structure of each line more than the rates.
Cyber Liability Insurance
Cyber policies, mostly claims-made, divide into two halves:
First-party (the insured's own loss):
- Data breach response and notification costs
- Business interruption from a network outage
- Cyber extortion / ransomware payments
- Data restoration
Third-party (liability to others):
- Privacy liability for exposing customer data
- Network security liability
- Media/content liability
- Regulatory defense and fines (where insurable)
Because cyber is claims-made, the retroactive date and any extended reporting period (ERP / 'tail') are critical: a claim is covered only if the wrongful act occurred on or after the retro date and the claim is reported during the policy period or tail.
Standard ISO forms generally exclude cyber: the CGL added the CG 21 06 / CG 21 07 access-or-disclosure and electronic-data exclusions, pushing data-breach exposure to standalone cyber policies. Property forms exclude loss of electronic data as 'not tangible property.' Producers must therefore recommend a dedicated cyber policy rather than rely on the package — a common errors-and-omissions pitfall the exam highlights.
A retailer's network is breached; it must pay $200,000 for forensic investigation and customer notification AND faces a $1,000,000 class-action lawsuit from affected customers. Which coverages respond?
Aviation Insurance
Aviation is a specialty line combining property and liability components:
- Hull coverage — physical damage to the aircraft. Written on an all-risk while in flight, taxiing, and on the ground basis, or narrower 'not in motion' forms.
- Liability coverage, often using a split-limit structure:
- Bodily injury excluding passengers (third parties on the ground / 'public liability')
- Passenger bodily injury (admitted/passenger liability)
- Property damage liability
Aviation distinguishes admitted liability (paying passengers) from non-admitted/guest liability (non-paying guests), which affects limits. Coverage is suspended if the aircraft is operated outside the policy's stated purposes (e.g., commercial use under a private-use policy) or by an unapproved pilot.
Worked Example: Aviation Split Limits
A charter operator's policy reads: $1,000,000 each person / $5,000,000 each occurrence / $2,000,000 property damage, with a separate $100,000 per-passenger sublimit.
In one crash, three passengers are each awarded $250,000 in bodily injury, and $300,000 of property on the ground is destroyed.
- Passenger BI: the $100,000 per-passenger sublimit caps each award — 3 x $100,000 = $300,000 paid (not $750,000).
- Property damage: $300,000 loss is within the $2,000,000 PD limit — $300,000 paid.
- Total paid = $600,000, even though awards totaled $1,050,000.
The trap is applying the high each-person/each-occurrence figures while ignoring the lower per-passenger sublimit. Always apply the most specific sublimit first.
Inland and Ocean Marine
Inland marine evolved to cover property that moves or is held by others, plus instrumentalities of transportation/communication:
- Transportation floaters (motor truck cargo, transit)
- Bailee coverage (a cleaner holding customers' goods)
- Personal articles / equipment floaters (jewelry, contractors' equipment)
- Builders risk, bridges, pipelines
Ocean marine has four traditional coverage parts:
- Hull — physical damage to the vessel
- Cargo — goods being shipped
- Freight — the shipping revenue/income at risk
- Protection & Indemnity (P&I) — the vessel owner's liability to others
Ocean marine commonly uses named perils and key clauses like the Inchmaree clause (latent defects, machinery breakdown) and General Average (shared sacrifice loss).
General Average is a high-yield concept: when cargo is voluntarily sacrificed to save the venture (e.g., jettisoned in a storm), all parties — ship, cargo, and freight owners — share the loss proportionally. This contrasts with Particular Average, a partial loss borne solely by the owner of the damaged property. Inland marine, by contrast, is regulated by the Nationwide Marine Definition, which sets the boundaries of what property may be written as marine rather than as fire/property insurance.
Umbrella and Excess Liability
A commercial umbrella provides high limits above the insured's primary CGL, auto, and employers liability. Two functions:
- Excess — pays after the primary limit is exhausted.
- Drop-down / broader — covers some claims the primary excludes, after the insured pays a self-insured retention (SIR).
Umbrellas require underlying limits be maintained; if the insured lets primary coverage lapse, the umbrella pays only what it would have if the primary were still in force.
Worked SIR example: A claim not covered by the primary policy is $500,000. The umbrella has a $25,000 SIR. The insured pays the $25,000 retention, and the umbrella pays the remaining $475,000 (within its limit). For claims the primary does cover, no SIR applies — the umbrella simply sits excess of the underlying limit.
An insured faces an $800,000 covered claim. The primary CGL limit is $300,000 (exhausted by this loss) and the commercial umbrella has a $1,000,000 limit with a $10,000 SIR that applies only to losses the primary excludes. How much does the umbrella pay?
Cyber Liability: First-Party vs. Third-Party Coverage
Cyber insurance splits into two halves the exam contrasts:
| Coverage | Pays for the insured's... | Examples |
|---|---|---|
| First-party | Own losses | Data restoration, business interruption, ransomware/extortion, breach notification costs, forensic investigation, PR |
| Third-party | Liability to others | Claims by customers whose data was breached, regulatory fines/defense, media liability |
Most cyber policies are written claims-made. Breach-notification costs and regulatory exposure (driven by state breach-notification laws and privacy regulation) are central first-party/third-party drivers. Aviation policies use admitted-liability (medical) and bodily-injury/property-damage structures, often with split limits and a separate hull (physical damage) coverage akin to auto.
Trap: first-party cyber pays the insured's own restoration, business interruption, and extortion costs; third-party cyber pays the insured's liability to others whose data was compromised. A policy covering only one half leaves a major gap.
A company suffers a ransomware attack: it incurs costs to restore its own data and faces lawsuits from customers whose information was exposed. Which cyber coverages respond?