Electronic and cyber risks insurance program

• The best way to protect your business from cyber-attacks is to prevent them. However, this is sometimes not possible.
• System breaches and Cybersecurity are a source of concern for any business, given the nature of the information it manages.

According to the General GDPR Regulation which comes into effect on the 5th/2018, companies that will not be able to maintain the security of customers' personal data:

• They are required to report within 72 hours of detecting any incident of a personal data breach.
• They risk administrative fines which can reach up to €20 million or 4% of annual turnover, whichever is higher.
• They are obliged to compensate their customers whose personal data they have failed to safeguard

• To Small and Medium Enterprises with an annual turnover not exceeding €2,500,000
• To enterprises with a natural or legal person
• To enterprises operating in one of the categories listed in the following table

2 insurance packages, ERGO Cyber Advanced Plus and ERGO Cyber Total Plus

Possibility to choose a cover capital of €25,000, €50,000, €100,000, €150,000, €200,000, €250,000, €300,000 depending on the company's turnover.

In more detail:
Incident response & incident management center
Pay for reasonable and necessary expenses due to an actual or suspected cyber incident for:

• Investigation of the causes, Identification and response to the incident by an expert
• Compliance with applicable data protection laws following their violation
• Operation of a crisis management center
• Management and protection of the insured's reputation (up to 60 days)
• Legal defense costs incurred as a result of actions by supervisory authorities
• Administrative fines and supervisory authority sanctions as a direct consequence of a data breach

Database restoration

Compensation for reasonable and necessary costs to restore and adjust the insured's data following an incident to the nearest possible state prior to the incident.

Cyber Extortion
Compensation for ransom paid by the insured (if legally permissible) and reasonable and necessary expenses related to the resolution of a Cyber Extortion.

Cyber Crime
Compensation for funds unlawfully taken from the insured as a direct result of a Cyber Crime.

Business interruption (ERGO Cyber Total Plus plan only)
Coverage for loss of gross profit and increased labour costs incurred during the indemnity period as a direct result of the full or partial unavailability or degradation of services of the insured's systems due to a cyber incident (up to 90 days).

Confidentiality and Privacy Liability
Coverage of amounts for which the insured is legally responsible and which arise from third party claims for breach of confidential data or violation of applicable data protection laws (including personal data of the insured's employees).

Network Security Liability
Coverage of expenses for which the insured is legally responsible and which arise from third party claims due to an incident on the insured's computer systems that results in:

• Damage to alteration, destruction, unauthorized access, unauthorized disclosure of data stored on third party computer systems
• Interruption or degradation of services of third-party computer systems

Personal legal liability of the insured's employees arising from a third-party claim for acts or omissions in the course of their employment is also covered (unless such acts or omissions are intentional, malicious or willful).

1. Companies with Annual Turnover up to €1,000,0000

Note: Military services, Banking services, Insurance services, Telecommunications, Public Services cannot be insured with the Cyber Insurance program.


2. Companies with an Annual Turnover of €1,000,0001 to 2,500,000.

Note: Military services, Banking services, Insurance services, Healthcare, IT services, Pharmaceuticals, Retail/wholesale stores with online sales of more than 30%, Telecommunications, Transport, Public services.