Reputational risk: can you insure it?

You can insure parts of reputational risk, but not the reputation itself. Standard policies pay for specific, defined losses such as a defamation judgment, breach notification costs or a recall, and a small specialty market sells crisis management and lost-profit cover that activates after a defined adverse event. No policy puts a damaged brand back where it was, and most reputational harm, such as a boycott, a viral complaint or a bad strategy, falls outside every form.

Why reputation does not fit a standard policy

Insurance pays for a fortuitous loss that can be measured. Reputation resists both tests. Customers leave for many reasons, and the revenue lost because people think less of you is hard to separate from the revenue lost to competition or a weak economy. Underwriters therefore insure around reputation: they write cover for the event that causes the damage, or for the cost of responding, and rarely for the damage itself.

Lockton strategist Steve Claringbold made the same point in a January 2023 article. Traditional policies, including professional indemnity, cyber, D&O and business interruption, may respond to parts of a reputational event depending on their scope, and stand-alone reputational insurance is a separate product usually bundled with revenue protection. He also notes that insurance is unlikely to restore an organization to its prior position; it can only reduce the impact (Lockton).

What your existing policies already do

Walk through the events that usually start a reputational crisis and match each to the policy that may help.

The key point in the table is that each policy answers a legal or physical trigger. Coverage B pays when someone sues you over words you published, not when a review site turns on you. The CGL's personal and advertising injury definition in the standard ISO form includes publishing material that slanders or libels a person or organization or disparages their goods, products or services, and says nothing about protecting your own good name. Read your own wording; manuscript forms differ.

Stand-alone reputational harm cover

A few insurers sell policies built around reputation. They generally combine two parts:

• Crisis response costs. Fees for crisis communication consultants, public relations firms, specialist lawyers and digital communications experts, often available before any revenue loss shows.
• Lost profit. Gross profit lost after a defined event, usually paid for a fixed indemnity period.

The Beazley-led Custodian consortium at Lloyd's, announced in April 2019, shows the structure. Per Insurance Journal, its lost-income cover paid only once revenue fell by a threshold agreed at inception, crisis advice could reach $1 million with underwriter consent, and the first $250,000 was available before any revenue loss. It was written on an all-risks basis, with exclusions for cyber and product recall, systemic or macroeconomic events, failure of corporate strategy, and fraud or criminal acts, and was offered to U.S. organizations with up to $5 billion in revenue (Insurance Journal). That was a 2019 launch, and capacity and terms have moved since; use it as an illustration, not a quote.

Other designs tie the trigger to a covered event. Coalition's help center describes a reputational harm loss coverage on its cyber product that reimburses net profit lost because of adverse publication about a security incident. Others require two triggers, such as a cyber event followed by media coverage. Lockton's crisis product, per its brochure, can respond to an event that has occurred, is suspected, or is imminent.

Features to compare

• Trigger. An enumerated list of perils, an all-risks grant, or a covered event plus adverse publicity.
• Revenue threshold. How far sales must fall, measured against what baseline, before lost profit is paid.
• Indemnity period. Commonly between 30 days and 12 months, according to market commentary; shorter than the time a brand takes to recover.
• Sublimits and aggregates. Many programs sublimit reputational harm inside a larger policy, and annual aggregates reduce what remains after a first incident.
• Vendor control. Many forms require you to use the insurer's crisis firm, which speeds some responses and slows others.
• Proof. Expect to document the adverse coverage and the financial loss over time. Insurers estimate lost profit from patterns such as new-customer acquisition and churn.
• Exclusions. Poor strategy, known issues, fraud, and anything that is really a recall or cyber loss.

A hypothetical

Say a 12-location restaurant group in the Southeast faces a viral video alleging a health code violation at one kitchen. Sales dip at every location for two months. Which policy pays?

• The general liability policy pays nothing unless a customer sues over bodily injury.
• The property policy's spoilage and business income coverage does not respond; there was no physical damage.
• If the video proves to be false and the group sues the poster, that is the group's own claim, not an insured loss.
• A reputational harm policy might have paid for a crisis firm and some lost profit if the video fit the trigger and the revenue threshold. Without one, the group pays its own consultants and absorbs the revenue loss.

The lesson is not to buy a policy. It is that the plan, the training and the response matter more than the coverage; see Restaurant insurance for the underlying liability exposures.

What to do instead of, or alongside, buying cover

1. Write a crisis communications plan and name who speaks, who approves and how fast. Run a drill.
2. Add a reputational scenario to your writing a business continuity plan: a step-by-step guide. What if a major customer or review site turned? What if a founder is named in an allegation?
3. Check your cyber, D&O and recall policies for crisis communications and public relations expense sublimits, and for whether the insurer's vendor must be used.
4. Review media and advertising practices. Defamation, disparagement and copyright claims are insurable, but only under the right form; see media liability insurance: defamation, copyright and content claims.
5. Keep records of customer trends (new customers, churn, average order) so any lost profit claim can be proven.
6. Ask your broker whether a stand-alone product is available for your size and industry, and compare it against the cost of retained risk.

Key takeaways

• Insurers cover events and response costs that can be defined and measured; they do not cover goodwill.
• Your general liability, cyber, D&O and recall policies each respond to a narrow trigger, and none replaces lost revenue from a damaged brand.
• Stand-alone reputational harm policies exist, with revenue thresholds, indemnity periods and exclusions that make them specialty products.
• A crisis plan, tested before an event, usually does more than any policy.
• Ask for the exact trigger and exclusions in writing before you rely on any reputational cover.