
One of the greatest fears I had of owning an insurance agency was the possibility of customer data being compromised. As an agency we collect data on customers and aggregate that data for use in providing and renewing insurance policies. We also have clients who for convenience like to pay by phone with bank or credit card information.
It is imperative that the agency takes the highest level of precaution in order to protect the privacy of that client’s data. Not only is the client at risk but the agency reputation is at risk as well should a breach occur.
A great place to start is “Agency Policy”. What does the agency policy regarding Cyber Liability look like?
• What is thrown away and what is shredded? (Lack of common sense is not a good defense:)
• What method of shredding? Secure Shred bins? Micro Shredder? (Conventional shredders leave documents in a condition where crooks can paste together).
• Who has access to client’s data? All employees have or only licensed employees?
• When computers are replaced what is done with the hard drive? Do you have a certificate of destruction from a licensed data destruction company?
The list is far from complete but the point is without the policy/procedures you have no defense and the attorney’s will prevail.
As an Insurance Agency I would want to protect myself with the following coverage’s:
• Electronic Data Liability – this exposure involves the inability to access or use electronically stored data because of a loss.
• E-Business Loss Event Liability – provides coverage for financial claims, and the associated defense expenses made against you as a result of a covered e-business loss.
• Public Relations Expenses – provides broad coverage for public relations expenses including consultants, complete PR campaigns and media expenses.
As an Agent/Agency: Do you have policies in place? When was the last time they were reviewed?
As a Consumer: Have you ever thought to ask your agent about their privacy policy? Are they insured?
Disclaimer: This article is written from an insurance perspective and is meant to be used for informational purposes only. It is not the intent of this article to provide legal advice, or advice for any specific fact, situation or circumstance. Contact legal counsel for specific advice.