Cyber & Data Breach
The policy for a breach of patient data and for the cost of being unable to operate because a system is down. Aesthetic practices hold an unusual amount of sensitive material, including before and after photography, and it is patient data.
The claim that actually happens
Booking system compromised, records and images exposed
The direct loss is rarely the largest number. Notification, credit monitoring, forensics, regulatory response and business interruption are, and they begin immediately. Practices with no cover fund all of it themselves while continuing to trade.
What it responds to
- Breach response, notification and forensics
- Regulatory defense and fines where insurable
- Business interruption from a system outage
- Ransomware response
- Third party claims from affected patients
- Media liability for your own content
What people assume it covers, and it does not
- Loss of hardware itself, which is property
- Fraudulent transfer, unless funds transfer fraud is added
- Breaches that began before the policy started
Who usually does not have this
Nearly everyone. Practices assume a cloud EHR vendor carries the risk. The vendor carries their own. The patient relationship is yours.