Law firm insurance: coverage, requirements and costs

A law firm needs professional liability written for lawyers, a policy usually called lawyers professional liability (LPL) or legal malpractice insurance, plus crime and cyber cover for the client money and files it holds, and a package for the office. Law offices sit in NAICS 541110, and firms that run real estate closings may also touch 541191. Unlike most trades, the law is itself a regulator of the insurance: two states make malpractice coverage a condition of private practice, and a larger group makes you tell clients or the bar whether you have it.

Why law firms need business insurance

The core exposure is a client who says your error cost them money. A general liability or BOP policy does not respond to that, which is why E&O vs general liability: what each one covers matters here. LPL is written on a claims-made policy form: the claim must be made and reported inside the policy period, and the policy only reaches work done after the retroactive date.

Where do claims come from? The ABA's Profile of Legal Malpractice Claims for 2020 to 2023, as summarized by Swiss Re Corporate Solutions in November 2024, puts estate, probate and trust matters at about 14% of reported claims, notes that conflicts of interest are among the most frequently alleged errors, and reports increases in failure to timely commence proceedings, settlement-negotiation issues and administrative errors. It also reports claims rising against firms of more than 500 lawyers and falling against firms of five or fewer. Treat that as a pattern, not a prediction for your practice.

Core coverages

• Lawyers professional liability. Pays defense and damages for wrongful acts in rendering legal services. CNA, a large LPL writer, says it insures firms of every size and offers a "Program Law" product for firms of 1 to 34 lawyers (not in Oregon, Wyoming or West Virginia) and brokered placements for firms of 35 or more (CNA website, October 2026). Check who counts as an insured: of-counsel, contract lawyers, former partners and non-lawyer staff are handled differently. See lawyers' professional liability insurance: coverage and key terms.
• The consent clause. Most LPL policies let the insurer settle only with your consent, but a hammer clause caps what the insurer pays if you refuse a settlement it recommends. See the hammer clause: what happens if you refuse a settlement. Whether defense costs erode the limit also matters; see defense costs.
• Tail and prior acts. When partners retire, firms merge or dissolve, you need an extended reporting period. Price it early with tail coverage cost calculator and read tail coverage and extended reporting periods.
• Crime and funds transfer fraud. Trust and IOLTA accounts make law firms prime targets for spoofed-wire fraud. Many LPL policies do not cover a loss of client funds to a thief; see funds transfer fraud, social engineering fraud: cyber policy or crime policy? and employee theft coverage and fidelity bonds: what they cover and who needs one.
• Cyber. Breach response, forensics and ransomware for the firm's own systems, plus liability for client data. See cyber insurance: what it covers for a business.
• BOP, EPLI and comp. The office package, employment practices liability and workers' compensation round out the program.

Coverage you may be required to carry

This is the section where law differs most from other trades.

• Oregon: Any Oregon State Bar licensee in private practice with a principal office in Oregon must carry primary malpractice coverage through the Professional Liability Fund (PLF). The 2026 plan has a $300,000 limit per claim and $300,000 aggregate plus a $75,000 claims expense allowance, no deductible, and a $3,500 assessment per licensee. Lawyers with a principal office outside Oregon who practice in the state must hold coverage substantially equivalent to the PLF primary plan under OSB Rule of Licensure 5.3, and the PLF page gives two different effective dates (January 1, 2025 and 2026), so confirm with the bar (PLF, October 2026).
• Idaho: Under Idaho Bar Commission Rule 302(a)(5), active and house counsel members who represent private clients must show coverage of at least $100,000 per occurrence and $300,000 in the annual aggregate, and must notify the Bar within 30 days if the policy lapses unless it is renewed or replaced without substantial interruption (Idaho State Bar, October 2026).
• Ohio: Coverage is not mandatory, but under Rule 1.4(c) of the Ohio Rules of Professional Conduct a lawyer who does not maintain at least $100,000 per occurrence and $300,000 aggregate must tell the client in a separate form signed by the client and keep the signed notice for five years after the representation ends. Government and in-house lawyers are excepted.
• Other states: The ABA adopted a Model Court Rule on Insurance Disclosure in 2004. It does not require coverage; it asks states to make lawyers disclose whether they carry it, either on the annual registration statement or directly to clients. Many states have adopted some version, and a few have declined. Confirm your own bar's current rule on its website.

Beyond licensing, clients such as banks and corporate legal departments often write minimum LPL limits into outside-counsel guidelines, and leases require general liability naming the landlord as additional insured.

Common claims and how to prevent them

• Missed deadlines. A centralized docket, calendar entries made by one person and checked by another, and a tickler for statutes of limitation. A missed limitation period is the clean, undefendable claim.
• Drafting errors. A checklist for wills, trusts, deeds and contracts, and a supervising-lawyer review for associates.
• Conflicts. Run a conflict check at intake and again when parties are added. Use non-engagement letters so a declined prospect does not later claim you were their lawyer.
• Fee disputes. A clear fee agreement and early billing. A suit for fees commonly draws a malpractice counterclaim, and some policies exclude or restrict fee-recovery actions.
• Wire and email fraud. Call back on a known number before any trust-account wire and treat changed payment instructions as suspect. See business email compromise and funds transfer fraud coverage.
• Ransomware. Multi-factor authentication, offline backups and an incident plan; see MFA, EDR and backups: the controls cyber insurers now require.

What drives the cost

• LPL: the usual rating base is the number of lawyers, adjusted by practice mix and the firm's claims history. Real estate closings, plaintiff personal injury, estates and trusts, securities, patents, and class-action work rate higher; some carriers decline or sublimit specific areas. Underwriters ask about turnover, use of contract lawyers, docket controls, conflict checks, trust-account controls, limits, deductible or self-insured retention, claims history, and each lawyer's years of practice. A larger deductible lowers premium.
• Cyber: revenue, record counts, MFA and backups.
• Crime: the amount of client money held and the controls on trust accounts.
• Comp: payroll by class code; clerical staff and attorneys are generally rated in low-hazard codes. See how commercial insurance premiums are calculated.

Specialized coverages to consider

• Disciplinary proceedings coverage for bar complaints, usually a sublimit; confirm the amount.
• Excess LPL limits above the primary, especially for firms with large transactional or estate clients.
• Third-party client property or crime coverage for funds in trust.
• Fiduciary liability if the firm sponsors a retirement plan; see fiduciary liability insurance for employee benefit plans.
• Hired and non-owned auto for lawyers who drive to courts and clients; see Hired and non-owned auto (HNOA) coverage: what it covers and who needs it.

How to buy

Small and midsize firms usually buy through a broker or program that places LPL, with the office BOP and cyber from the same agent where possible. State bar-endorsed programs exist in some states; confirm the carrier's financial strength and the actual policy terms, not just the endorsement. Have ready: lawyer count and years of practice, practice-area percentages, revenue, the engagement and non-engagement letter templates, docket and trust-account procedures, any known potential claims, and loss runs. Failing to disclose a circumstance you knew could lead to a claim can jeopardize coverage. See how to prepare an insurance submission underwriters will read.

Key takeaways

• A BOP or general liability policy will not respond to a malpractice claim; buy LPL.
• Oregon and Idaho require malpractice coverage for private practice; Ohio and many other states require disclosure instead.
• LPL is claims-made. Protect the retroactive date and price tail coverage before a retirement, merger or dissolution.
• Client funds sit outside many LPL policies; ask about crime, social engineering and funds transfer fraud cover.
• Docket control, conflict checks and trust-account call-backs prevent more claims than any endorsement.