Author: VU Faculty

ISO’s Businessowners program remains very adaptable to ever-occurring changes in the business environment. The fact that the program has remained relevant and adaptable over the past four decades is a testament to their endurance. Enter the Micro BOP and its new endorsements. 

The recent endorsement modifications center on changes in cyber risks, which is an especially critical issue facing all businesses today. 

New Endorsements 

Cyber Incident Liability Exclusion - BP 18 03 – Mandatory 

This endorsement will apply as a conditional mandatory endorsement. If either of the Cyber Incident Liability Coverage endorsements BP 18 07 or BP 18 08 attach to the policy (addressed below). This endorsement excludes coverage with respect to bodily injury, property damage, or personal and advertising injury arising out of a cyber incident. A definition of cyber incident is provided within the endorsement, which is consistent with endorsement BP 15 60 – Cyber Incident Exclusion.  

Violation Of Law Addressing Data Privacy Exclusion –- BP 18 04 –– Mandatory endorsement  

The Data Privacy exclusion generally addresses acts or omissions that violate, or are alleged to violate, laws that pertain to confidential or personal material or information including financial, health, biometric or other nonpublic material or information. 

Electronic Data Liability – Limited Coverage Subject to Cyber Incident Exclusion, Deletion of Bodily Injury Exception - BP 18 05 – Optional 

This endorsement is similar to endorsement BP 05 95. However, BP 18 05 does not contain the exception for bodily injury that BP 05 95 contains. 

Cyber Incident Liability Exclusion for Electronic Data Liability – Broad Coverage - BP 18 06 – Optional 

This endorsement is available for use with Electronic Data Liability – Broad Coverage Endorsement BP 05 96. It excludes coverage for loss of electronic data arising out of a cyber incident. The provisions of this endorsement are similar to endorsement BP 18 03. 

Cyber Incident Liability Coverage Subject to Each Cyber Incident Occurrence and Aggregate Limits - BP 18 07 – Optional 

This endorsement, which amends Section II – Liability, is designed to provide limited coverage for damages because of bodily injury or property damage caused by a cyber incident. Coverage is excluded for personal and advertising injury arising out of a cyber incident. This endorsement will be available for optional use in lieu of endorsement BP 18 03. 

Cyber Incident Liability Coverage and Electronic Data Liability Coverage Subject to Loss of Electronic Data, Each Cyber Incident Occurrence and Aggregate Limits - BP 18 08 – Optional 

This endorsement is designed to limited coverage under Section II − Liability with respect to damages because of bodily injury or property damage caused by a cyber incident, similar to endorsement BP 18 07 addressed above, and to provide coverage with respect to loss of, loss of use of, damage to, corruption of, inability to access, or inability to manipulate "electronic data" which results from physical injury to tangible property. This endorsement is available for optional use in lieu of endorsement BP 18 03. 

Exclusion – Electronic Data – Deletion of Bodily Injury Exception - BP 18 09 – Optional 

This new endorsement will replace the current endorsement BP 15 05, which ISO is withdrawing (see below). It is similar to BP 15 05 but addresses Exclusion B.1.q. Electronic Data under Section II – Liability of BP 00 03, by deleting the limited exception for bodily injury. 

Exclusion Electronic Data – Deletion of Bodily Injury Exception - BP 18 09 – Optional 

The endorsement is similar to BP 15 05.  It addresses Electronic Data in the liability section of BOP (BP00 03) by deleting the limited exception for bodily injury. 

Revised Endorsements 

Limited Coverage Subject to Cyber Incident Exclusion - BP 05 95 – Electronic Data Liability – Optional 

This endorsement remains available to provide limited coverage under Section II – Liability, with respect to loss of, loss of use of, damage to, corruption of, inability to access, or inability to manipulate "electronic data" which results from physical injury to tangible property. ISO revised the endorsement title to reflect the addition of the Cyber Incident Exclusion. A cyber incident exclusion is added to reinforce that this endorsement is not designed to provide coverage with respect to bodily injury or property damage arising out of a cyber incident. 

Electronic Data Liability – Broad Coverage - BP 05 96 – Optional 

This endorsement remains available to provide coverage, on a claims-made basis, against damages because of loss of electronic data that is caused by an electronic data incident. Access Disclosure or Unauthorized Use of Electronic Data Exclusion has been replaced with reinstated Unauthorized Use of Electronic Data exclusion from the previous edition of the Electronic Data Liability – Broad Coverage endorsement (BP 05 96), A newly added Access or Disclosure of Confidential or Personal Material or Information exclusion. 

Exclusion – Access or Disclosure of Confidential or Personal Material or Information- BP 15 04 – Mandatory 

This endorsement is revised to address only the Access or Disclosure of Confidential or Personal Material or Information exclusion. The provisions addressing the Electronic Data exclusion, including the limited exception for bodily injury and electronic data definition, are deleted as unnecessary. The term "biometric information" is added to the types of material or information addressed in the exclusion. 

Exclusion – Access or Disclosure of Confidential or Personal Material or Information (Personal and Advertising Injury Only) - BP 15 06 - Optional 

This exclusion only addresses “personal and advertising injury.” With respect to bodily injury, property damage and personal and advertising injury arising out of access or disclosure of confidential or personal material or information, the changes in this revised endorsement are a reinforcement of coverage intent. Includes deletion of the electronic data exclusion. 

Withdrawn 

Exclusion – Access or Disclosure of Confidential or Personal Information and Data-Related Liability – Limited Bodily Injury Exception Not Included BP 15 05 

Originally Published: May 23, 2025

_____________________________________________________________________________________________________________________________________ 

Copyright © 2025, Big “I" Virtual University. All rights reserved. No part of this material may be used or reproduced in any manner without the prior written permission from Big “I" Virtual University. For further information, contact nancy.germond@iiaba.net.