Guides
Are fines, penalties and punitive damages insurable?
When insurance can pay fines, penalties and punitive damages: the public policy rule, how states split on punitive damages, and the policy wording to check.
Sometimes, but not reliably. Whether insurance can pay a fine, a penalty or a punitive damages award depends on two separate questions: does the policy language cover it, and does the law of the relevant state allow an insurer to pay it. Compensatory damages are insurable almost everywhere; punitive damages and regulatory fines are where the answer turns on the state, the policy wording and the kind of conduct behind the award.
Insurers also separate defense costs from the money judgment. Even where fines or punitive damages are not covered, a liability policy may still pay to defend the case, which can be worth more than the fine.
Two tests, not one
Think of insurability as a two-step test.
- What does the policy say? If the policy expressly excludes punitive damages or fines, the analysis ends. If it expressly covers them "where insurable by law," you go to step two. If it is silent, you go to step two too. Under the Texas Supreme Court's framework in Fairfield Insurance Co. v. Stephens Martin Paving (2008), the first step is whether the plain language of the policy covers the damages sought; public policy is the second.
- Does public policy allow it? Courts in many states refuse to let an insured shift to an insurer the cost of a punishment meant to deter the insured. Others reason that insurance is a contract and the parties may allocate the risk, especially for liability imposed on a company for an employee's act.
Related is the principle that you cannot insure a loss you intend to cause. California codifies it in Insurance Code section 533, which bars coverage for willful acts. That is why intentional-act exclusions appear in nearly every liability form.
Punitive damages: the state split
A concurring opinion in the Fairfield case, as summarized in reporting on the decision, counted the states roughly as follows:
| Approach | States (count in the Texas court's survey) |
|---|---|
| Generally permit coverage of punitive damages | 19 |
| Permit coverage for gross negligence, not more serious conduct | 8 |
| Permit coverage for vicarious liability, not direct liability | 11 |
| Generally prohibit coverage | 7 |
States can sit in more than one category, so the counts overlap. A few anchors:
- California treats punitive damages as uninsurable on public policy grounds, and the California Supreme Court reaffirmed that in PPG Industries v. Transamerica (1999).
- New York takes a similar view. In Home Insurance Co. v. American Home Products (N.Y. 1990) the Court of Appeals held that New York public policy precludes indemnification for punitive damages. In Zurich Insurance v. Shearson Lehman Hutton (N.Y. 1994) the court showed the outcome can differ depending on the state whose law produced the award.
- Texas allowed coverage of exemplary damages for gross negligence under a workers' compensation and employer's liability policy in Fairfield, a narrow holding that does not decide every policy type.
- Montana provides by statute that coverage does not extend to punitive or exemplary damages unless the contract expressly includes them.
Because this is state-by-state and changes through case law, treat the table as orientation, not a rule for your state. Ask your broker and coverage counsel which state's law governs your policy, and see workers' comp and benefits requirements by state.
Vicarious liability
A common middle path: a business is held liable for punitive damages because of what a manager or employee did, without the business itself acting wrongfully. Several states allow insurance in that case while barring coverage when the company's own conduct is the basis. A policy that is silent can end up covered for the first and not the second.
Fines and penalties by type
| Type | Usually insurable? | Why it matters |
|---|---|---|
| Civil regulatory fines (privacy, data security) | Sometimes, if the policy grants it and law allows | Cyber policies commonly cover regulatory defense and may cover penalties "where insurable by law" (see state privacy laws and what they mean for business insurance) |
| Payment card assessments | Often via a specific cyber grant | Contractual, not governmental; see payment card fines and assessments: does cyber insurance pay? |
| HIPAA civil money penalties | Depends on cyber wording and conduct | See HIPAA breaches and cyber insurance for healthcare providers |
| OSHA penalties | Generally not covered under liability forms | A penalty for the employer's own violation; per verified 2025 figures, willful or repeated violations can reach $165,514 each |
| Criminal fines | No | Public policy and intentional-act exclusions |
| Sanctions (OFAC) penalties | Not something standard policies promise to pay | Strict-liability regime; policies also carry sanctions clauses, see sanctions clauses in insurance policies |
| Wage-and-hour penalties | Rarely | See Wage-and-hour exclusions and third-party EPLI |
| Workers' comp "serious and willful" penalties | Often barred by statute | Some states, such as California, prohibit insuring them |
OSHA's current maximums come from the Department of Labor's 2025 adjustment, which still applied in 2026 after the 2026 adjustment was cancelled; see OSHA recordkeeping, injury rates and insurance.
The central distinction is punishment versus compensation. A remedial payment, such as restitution or refunds to consumers, may be treated differently from a penalty. Policies often exclude "fines, penalties, or multiplied damages," and many D&O and cyber forms then add back coverage for civil penalties where permitted by law. Read the definition of "Loss" before the exclusions.
Policy wording to check
Four phrases do most of the work:
- "Where insurable by law." This conditions coverage on the governing law. The best forms add a "most favorable jurisdiction" clause, which lets the insurer apply the law of whichever relevant state would allow coverage. Without it, the insurer can choose the law that denies it.
- "Loss" definition. In D&O, EPLI and cyber policies, the definition lists what counts as covered loss and carves out fines, penalties, taxes and sometimes punitive damages. Look for carve-backs for civil penalties and, in EPLI, punitive damages.
- Governing law and choice of venue. The state's rule on punitive damages may follow the policy, the insured's home state or the state where judgment was entered.
- Multiplied damages. Statutes that double or treble damages (antitrust, certain wage statutes, consumer fraud) are sometimes treated as punitive. Check whether the policy covers the multiplied portion.
Standard commercial general liability forms (ISO CG 00 01) cover damages because of bodily injury or property damage and exclude expected or intended injury. Whether a punitive award falls within "damages" is exactly the state-law question above, and carriers sometimes add punitive-damages exclusions by endorsement. Manuscript and carrier-specific forms differ.
Worked example (hypothetical)
A distributor is sued for knowingly misrepresenting product safety. A jury awards $2 million compensatory and $4 million punitive, and the court enters judgment in the state where the company is based.
- The liability policy covers the compensatory award, subject to limits. The insurer has paid for the defense throughout.
- The insurer reviews the punitive portion. The policy is silent, so it looks at state law.
- If the state bars coverage, the company pays the $4 million itself; if the state allows coverage for vicarious liability only, the question becomes whether the jury found the company, or only a manager, culpable.
- The company's umbrella may follow form, but a "where insurable by law" clause would still depend on the same state analysis.
The practical point: the time to learn this is before a claim. Ask at renewal what the policy does for punitive damages and fines, and what law governs.
Key takeaways
- Insurability needs both coverage under the policy language and no public policy bar in the governing state.
- Punitive damages are uninsurable in some states (California, New York), insurable in many others, and subject to splits for vicarious versus direct liability.
- Criminal fines and intentional wrongdoing are not insurable; civil regulatory fines may be covered under cyber or D&O wording "where insurable by law."
- Defense costs are often covered even when the fine is not.
- Look for a most-favorable-jurisdiction clause and a clear definition of Loss; for details see Directors and officers (D&O) insurance explained.
Sources: Fairfield v. Stephens Martin Paving (Tex. 2008), via Insurance Journal; Zurich v. Shearson Lehman Hutton (N.Y.); IADC overview of punitive damages insurability.