Best Business Insurance UK: Public Liability, Professional Indemnity, and Cyber Cover for SMEs

For a UK SME, the most useful question is rarely “which insurer is best?” It is: which loss could seriously disrupt this business, which party could bring the claim, and what evidence shows that the policy actually addresses it? This guide does not rank insurers, brokers or packages. A fair provider ranking would require a fixed and reproducible quote universe, the same business facts for each quotation, full current wordings and a way to test claims handling—evidence this desk does not hold. Price comparisons alone would also be misleading because underwriting, limits, exclusions and contractual requirements differ by business.

A direct decision framework

Work through these five questions before requesting a quote or renewal review:

1. Is any cover legally required, or required by a client, landlord, regulator, trade body or tender? For most employers, employers’ liability insurance is the statutory starting point—not public liability, professional indemnity or cyber insurance.2
2. What is the plausible loss path? Separate injury/property damage to others, client financial loss caused by your professional work, employee injury, physical assets/interruption, and a digital or data incident. These are different exposures and should not be assumed to be interchangeable.1
3. What activity, geography, turnover, headcount, contract terms, data use and claims history must be disclosed? Commercial insurance is underwritten on the facts provided. The Insurance Act 2015 imposes a duty of fair presentation on a non-consumer insured before the contract is entered into.7
4. Can you identify the policy response in the actual documents? Check the schedule, full wording, endorsements and any summary together. Record the applicable limit, excess, exclusions, conditions, territorial scope, retroactive date where relevant and notification requirements. The UK government similarly advises businesses to compare cover, exclusions, limits and conditions rather than price alone.1
5. Can the business still operate if the claim is declined, delayed or capped? Insurance is a risk-transfer tool, not a substitute for safety, cyber security, contract management, reserves or legal and regulatory duties.

That is the decision framework behind the word “best” in this title: best fit to evidenced exposure and contractual need, not a universal provider winner. It is educational information, not insurance, legal, cyber-security or financial advice. A regulated intermediary or suitably qualified adviser can assess facts that this general guide cannot.

The comparison universe and method

Comparison universe: this article reviews the UK decision categories of employers’ liability, public liability, professional indemnity and cyber cover, plus the connected questions of business interruption, equipment/property and product liability. It does not compare named insurers, broker panels, price-comparison sites, premiums, excesses, claim-payment rates, service quality or “best buy” outcomes.

Inclusion limit: a policy category appears only where an official UK business source identifies its broad purpose. Individual policy outcomes are excluded because terms, eligibility and underwriting are contract-specific. No policy is represented as available, suitable or guaranteed to pay a claim.

Reproducible method: a reader can repeat the framework by making one fact sheet, asking each prospective provider or broker for documents against that same fact sheet, and scoring each answer as confirmed in wording, excluded/limited, or unclear—seek clarification. Do not award a positive score merely because a product label appears in a quote. A category score should be rejected if any mandatory contract requirement, declared activity or required territory is absent.

Use identical facts for every enquiry and retain the final schedule, wording and endorsements with the quotation. A broker that proposes or advises must make prescribed status and scope disclosures, including whether it gives a personal recommendation based on fair and personal analysis or has another stated distribution basis.3 For a commercial customer, a broker must promptly disclose its and any associate’s commission on request.12 These rules are useful safeguards; they do not mean every broker searches the entire market or that a quotation is a recommendation for your particular business.

Start with compulsory employers’ liability, then separate the other risks

Employers’ liability (EL) sits apart from the three headline covers because it may be compulsory. GOV.UK states that an employer must obtain EL insurance as soon as it becomes an employer, from an authorised insurer, for at least £5 million. Its purpose is to help pay compensation where an employee is injured or becomes ill because of work.2 The same guidance lists limited situations where EL is not required, including where the only employee is a qualifying family member or the employee is based outside England, Scotland and Wales.2 Do not treat those examples as a general “no staff, no issue” shortcut: employment status, location and corporate structure matter.

The GOV.UK guidance also says the EL certificate must be displayed where employees can access it and shown to inspectors if requested.2 It does not establish that a package labelled “business insurance” includes EL. Ask for EL to be shown distinctly in the schedule, check the insured employer name and ask how labour-only contractors, agency workers, volunteers, directors and overseas workers are treated where any of those facts apply. This is an eligibility and wording question, not a coverage assurance.

Public liability, by contrast, is described by the UK government as protection against claims that a member of the public was injured, or their property damaged, because of business activities.1 It is often relevant to a business that visits clients, receives visitors or has client/venue contractual requirements, but it is not presented by the government as a general statutory requirement.1 A photographer working on client premises, a tradesperson on site and a retailer with customers entering a shop may each face third-party injury/property exposures, but the activities, locations and contract obligations are not the same. The useful test is to map who can be physically affected and where the work is performed—not to assume a standard public-liability label covers all events, products, pollution, work at height, heat work, overseas activity or subcontracting.

Product liability may need separate attention for a business that makes, sells or supplies products. The government describes it as addressing claims that a product caused illness or injury.1 It should not be silently folded into public liability during a comparison: confirm the schedule and wording rather than assuming the two labels have the same scope.

Professional indemnity: map the financial-loss exposure

Professional indemnity (PI) is aimed at claims that advice, work or services caused a client financial loss, according to the UK government’s business guidance.1 That makes the question more precise than “are we a consultant?” A software developer, accountant, designer, marketing agency, recruiter, engineer or IT service provider may have materially different professional exposures, contractual promises and client expectations. Some professions, contracts or regulators may require PI, but a business should verify the exact requirement with the relevant client, regulator or professional body rather than rely on a generic insurance article.1

For PI, build a short service map before comparing documents:

• What professional services are described in client contracts and on the proposal form?
• Which historic work could generate an allegation after the next renewal?
• Does a client require a particular limit, duration, territory, governing law or evidence of cover?
• Are subcontractors used, and does the business remain contractually responsible for their work?
• Are there commitments around intellectual property, confidentiality, data, performance standards or contractual penalties that need specialist review?

The label “professional indemnity” cannot answer those questions. In particular, do not infer that a limit equals a contractual requirement without checking whether the contract calls for a particular type of cover, whether it applies per claim or in aggregate, or whether defence costs and excesses affect the practical amount available. Those features must be read from the proposed policy and contract. A business with complex or regulated work should take legal and specialist insurance advice on the interaction between its client agreement and the insurance wording.

Cyber cover: combine insurance review with incident readiness

The government describes cyber insurance as protection against losses resulting from data breaches, hacking or loss of digital data, and identifies it as relevant where a business trades online or handles/stores customer or client data.1 That is a useful exposure prompt, not a promise that every cyber policy responds to every ransomware event, fraud, outage, supplier incident or regulatory cost.

A cyber comparison should begin with operational facts: the systems required to trade; the data held; cloud and managed-service providers; payment processes; remote access; backup and restoration arrangements; prior incidents; and the person authorised to notify an insurer. Then compare the incident-contact process and any stated controls or exclusions in the actual documents. The National Cyber Security Centre’s small-organisations guide focuses on backups, protecting devices and accounts, and spotting scams; these controls remain important whether or not insurance is purchased.10

Crucially, cyber insurance does not remove UK data-protection responsibilities. The ICO says an organisation must assess the likely risk to people’s rights and freedoms after a personal-data breach. If a risk is likely, it must notify the ICO as soon as possible and, where feasible, within 72 hours; if the risk is high, it must also notify affected people without undue delay.9 The ICO’s guidance is under review following legislative change, so an incident plan should point staff to the current ICO guidance rather than rely solely on a policy document.9 Preserve evidence, follow the response plan and take legal or specialist incident advice where needed; do not delay an assessment while waiting for an insurance coverage decision.

Property, interruption and Condition of Average

Businesses that rely on premises, stock, tools, plant or equipment should consider whether physical damage and a resulting interruption would be financially material. The government describes business interruption insurance as protection for loss of income when the business cannot operate due to an event covered by the policy, such as flood or fire; it separately describes equipment insurance for loss or damage to machinery, tools, stock and essential equipment.1 The phrase “event covered by the policy” matters. A shutdown alone does not establish cover.

Condition of Average is not a statutory UK insurance requirement. It is a contractual policy term that may appear in property or interruption wordings. For illustration only, an accessible Allianz Complete Business wording—labelled by its publisher as a previous version—states that where a sum insured is less than the covered item’s value at the time of damage, the amount payable is reduced proportionately; it also contains a separate gross-profit Average provision.8 This example explains why a business should not assume that a sum insured is a maximum-only number. It does not confirm that any current insurer uses the same clause or formula.

The practical response is to identify every sum insured and valuation basis, record when each was last reviewed, and get professional valuation/insurance advice where buildings, reinstatement costs, specialist plant or business-interruption calculations are material. Read the specific current wording and endorsements for the policy being considered. Do not tell a client that Average will apply—or will not apply—without that evidence.

Underwriting, disclosure and document checks

Business insurance is normally written on disclosed facts. Under section 3 of the Insurance Act 2015, before a non-consumer contract is entered into, the insured must make a fair presentation of the risk: the disclosure must be reasonably clear and accessible to a prudent insurer, and material factual representations substantially correct.7 The Act’s detail and remedies are beyond this article, but the practical lesson is straightforward: use a controlled fact sheet, make reasonable internal enquiries, correct outdated descriptions and keep a record of what was sent.

Typical facts that may require confirmation include turnover, payroll, employee count, business activities, professional services, contract values, premises, security, products, overseas work, subcontracting, systems/data, previous claims/circumstances and material changes. The exact questions and relevance vary. Never omit a fact because a prior insurer did not ask about it, and do not assume renewal data remains correct.

Before purchase or renewal, ask for documents early enough to read them. FCA rules require appropriate policy information to be given in good time and in a comprehensible form so that a customer can make an informed decision; the required level takes account of policy complexity and customer type.4 Commercial customers may receive the relevant information through an Insurance Product Information Document, policy summary or similar summary where it is comprehensible, but the underlying wording and schedule remain central to any material question.4

Check an insurer or intermediary in the FCA Financial Services Register and make sure its permissions match the activity it is providing. The Register says that using an authorised firm with the correct permissions reduces risk but does not remove all risk; it also does not confirm that FSCS or Financial Ombudsman Service protection will definitely apply.11 Avoid assuming a logo, directory listing or search result verifies a firm.

Consumer Duty and complaints: do not overgeneralise commercial protections

The FCA states that the Consumer Duty sets high standards of protection for retail consumers.5 It is therefore inaccurate to say that Consumer Duty automatically applies to every commercial insurance purchase simply because the buyer is an SME. The FCA’s current discussion paper on commercial and bespoke insurance says smaller SMEs often have limited financial expertise and discusses protections for consumers and most smaller SMEs. It also records that the Duty excludes activities relating to contracts of large risks for a commercial customer, or where the risk is outside the United Kingdom.6 That paper is a discussion paper, not a statement that every proposed reform is in force.

The defensible position is narrower: the exact customer classification, contract and risk determine which rules apply. Ask the arranging firm to explain the regulatory basis relevant to the transaction; do not use this guide as a legal conclusion about Consumer Duty, ICOBS, redress or eligibility.

If a problem arises, complain to the firm first and follow its final-response process. The Financial Ombudsman Service says it can help micro-enterprises and small businesses, subject to its eligibility criteria. Its published summary defines a micro-enterprise as fewer than 10 people and annual turnover or balance sheet not exceeding €2 million; it sets separate tests for a small business and notes connected enterprises can affect the assessment.13 It can consider a wide range of insurance complaints, but jurisdiction, time limits and individual facts remain determinative.13 This is not a guarantee that a particular business or claim will be accepted.

A proportionate buying and renewal checklist

1. Create one risk and operations brief. Include legal entity/trading names, actual activities, people, contracts, property, systems/data and material changes. Keep the evidence behind it.
2. Separate compulsory, contractual and discretionary needs. Confirm EL status first. Then preserve client, landlord, tender, regulator and professional-body requirements in writing.
3. Use the same brief for every route to market. A direct insurer, broker and comparison route cannot be compared fairly if each receives different facts.
4. Compare documents, not headings. Reconcile every requirement to the schedule, wording and endorsements. Mark unresolved wording as unresolved, not covered.
5. Check intermediary status and service scope. Review FCA Register information, whether the intermediary recommends, and whether its market analysis is fair/personal, restricted or information-only as disclosed.3 11
6. Ask about price mechanics separately. If premium finance is offered, understand it as a separate credit decision; ask the broker about commission if relevant. The FCA notes that commercial customers may request prompt disclosure of the broker’s and associates’ commission.12
7. Set an operational claims plan. Name the incident/claim owners, store insurer contacts and policy documents, and set internal escalation steps. For a suspected personal-data breach, follow current ICO guidance and required reporting assessment—not just insurer instructions.9
8. Review before every renewal and material change. New service lines, staff, premises, contracts, equipment, turnover, acquisitions, exports, systems or incidents may change the risk information. The policy’s own change-of-risk terms matter.

Methodology, evidence limitations and maintenance

Methodology. Aurex Intelligence Research Desk reviewed UK government, FCA Handbook/FCA guidance, legislation, ICO, NCSC and Financial Ombudsman Service materials, accessed on 20 October 2026. We used those sources to distinguish legal requirements, regulatory scope, policy-information safeguards and loss categories. We did not obtain quotations, test claims handling, inspect a comprehensive insurer universe or give individual advice. The reference to one insurer wording is expressly illustrative of a contractual Average clause and is not a current product assessment.8

Evidence limitations. Insurance wordings, endorsements, underwriting acceptance, limits, pricing, excesses, territories, claims processes and legal/regulatory rules can change. This article does not verify any insurer’s current product availability or terms, and it makes no claims about value, approval, claim payment or suitability. Readers should obtain and read the live policy documents and seek specialist advice for material, regulated, complex, cross-border or contract-driven risks.

Corrections. To suggest a factual correction, please email info@AurexIntel.com with the URL, the statement, a primary source and the relevant effective date. Aurex will review substantiated corrections and update the article where warranted.

References