Business Insurance Requirements UK | Professional Insurance UK

Editorial attribution: Professional Insurance UK Editorial Team
Editorial review: 28 June 2026

There is no single list of insurance that every UK business may need to investigate. A requirement can arise from legislation, a regulator or professional body, a contract or tender, or a business’s voluntary decision to protect itself.

These sources are different. A policy that satisfies one requirement may not satisfy another, and the word “required” should not be used without identifying who or what imposes the requirement.

This framework sits within Business Insurance Resources and should be used alongside the issued policy documents and the exact source of the obligation.

The four requirement types

Requirement type	Who or what creates it?	Typical evidence	Main question
Statutory	An Act, Order, regulation or other legal rule	Certificate, policy or prescribed evidence	Does the law apply to this entity, activity, person, vehicle or territory?
Regulatory or professional	A regulator, licensing body, professional body or scheme rule	Qualifying policy, certificate or annual declaration	Which current rule, minimum terms, limit and insurer conditions apply?
Contractual	A customer, landlord, lender, platform, venue, principal contractor or supply-chain agreement	Certificate, schedule, endorsement or confirmation	Does the issued policy meet the exact contract clause?
Voluntary risk protection	The business chooses to transfer or fund a risk	Policy and internal risk decision	What loss could the business sustain, and what protection is proportionate?

A requirement can fall into more than one category. For example, a regulated profession may also agree a customer contract that requires a higher professional indemnity limit than the professional minimum.

1. Statutory insurance requirements

Statutory requirements are created by legislation. They must be checked against the exact legal provision, territorial scope, exemptions and current facts.

Employers’ liability insurance in Great Britain

The Employers’ Liability (Compulsory Insurance) Act 1969 generally requires an employer carrying on a business in Great Britain to maintain approved insurance against liability for bodily injury or disease sustained by employees arising out of and in the course of their employment.

The regime has exemptions and detailed regulations. Whether someone counts as an employee for this purpose cannot always be decided by the label “self-employed” or “contractor” alone. HSE guidance advises businesses to consider the nature of the relationship and control over the work.

The applicable minimum cover is commonly stated as at least £5 million, although insurers commonly offer £10 million. The policy and certificate requirements must be checked against the current legislation and HSE guidance.

The 1969 Act does not extend to Northern Ireland. Northern Ireland has a separate employers’ liability regime under the Employer’s Liability (Defective Equipment and Compulsory Insurance) (Northern Ireland) Order 1972 and related rules.

Read the dedicated employers’ liability material when it is published. Until then, use the current HSE or HSENI guidance and legislation for the relevant jurisdiction.

Motor insurance

Section 143 of the Road Traffic Act 1988 prohibits using, causing or permitting another person to use a motor vehicle on a road or other public place without the required third-party insurance or security.

A business should check:

who owns, hires or uses each vehicle;
who is permitted to drive;
the insured use, including business use;
whether employees use personal vehicles for work;
the territorial scope;
any fleet, hire, delivery or carriage activity.

A personal motor policy does not automatically cover every business journey. The certificate and policy wording must show the appropriate use.

Northern Ireland road-traffic legislation and administration should be checked separately where relevant.

Sector-specific legal requirements

Employers’ liability and road-traffic insurance are important examples, but they should not be described as the only possible legal insurance requirements for every activity.

Particular sectors, licences, transport activities, public functions or statutory schemes may impose insurance or financial-security requirements. A business should identify the legislation governing its actual activity rather than relying on a generic list.

2. Regulatory, licensing and professional requirements

A regulator or professional body may require members or authorised firms to maintain insurance as a condition of practice, authorisation, licensing or scheme participation.

The requirement may specify:

a minimum limit;
an approved or qualifying insurer;
minimum policy terms;
an excess limit;
run-off cover;
territorial or jurisdictional scope;
notification or annual declaration duties;
evidence that must be supplied.

Solicitors and authorised legal bodies

The Solicitors Regulation Authority’s Indemnity Insurance Rules require an authorised body to take out and maintain qualifying insurance and to ensure that it has adequate and appropriate cover under the current rules and minimum terms.

The exact requirement depends on the current SRA rules, the body’s status and its practice. A generic professional indemnity policy should not be assumed to qualify.

ICAEW members in public practice

ICAEW states that professional indemnity insurance is compulsory for members who hold a practising certificate and engage in public practice. Its PII Regulations and related guidance determine the applicable arrangements.

Other accountancy, legal, financial, health, construction and professional bodies may have their own rules. Check the body’s current official source and do not transfer one body’s requirements to another.

FCA-authorised firms and insurance distribution

The Financial Services Register is the public record of firms and individuals that are, or have been, regulated by the FCA and PRA, including appointed representatives.

A firm should check the rules and permissions that apply to its regulated activity. The fact that an insurance product is available does not itself establish regulatory compliance, and an entry on the Register does not remove the need to check the firm’s current permissions, restrictions and status.

3. Contractual insurance requirements

Insurance is often required by contract even where no general statute requires that cover for all businesses.

Requirements may appear in:

customer and supplier contracts;
tenders and framework agreements;
leases and licences to occupy;
loan or finance agreements;
franchise arrangements;
event, market or venue conditions;
construction and principal-contractor terms;
online platform or marketplace rules;
grant or public-sector funding terms.

Common clauses ask for:

public liability insurance;
professional indemnity insurance;
product liability insurance;
employers’ liability insurance;
cyber or data-liability insurance;
motor, goods-in-transit or contractors’ cover;
a specified limit;
cover maintained for a stated period;
an interest to be noted or another party to be named;
waiver of subrogation;
evidence before work begins;
notification if cover is cancelled or materially changed.

A contract clause is not the policy

The contract describes what one party has promised to maintain. The insurance policy determines what the insurer has agreed to cover.

The two may not match. Examples include:

the contract requires £5 million for each claim but the policy provides £5 million in the aggregate;
the required activity is excluded;
the contract requires worldwide cover but the policy territory is narrower;
the required period extends beyond the policy or needs run-off cover;
the policyholder name differs from the contracting entity;
an indemnity or liability accepted in the contract is wider than the policy covers;
an endorsement or sub-limit restricts the apparent headline cover.

Ask the insurer, broker or legal adviser to review material mismatches. Do not alter a certificate or describe cover more broadly than the issued documents permit.

4. Voluntary risk protection

Many important covers are not universally required by law. A business may still choose them because an uninsured loss could be serious.

Examples can include:

public liability;
professional indemnity outside a compulsory profession;
product liability;
property and equipment;
business interruption;
cyber and crime;
directors’ and officers’ liability;
legal expenses;
goods in transit;
trade credit;
personal accident or key person arrangements.

“Voluntary” does not mean unnecessary. It means the decision is not being presented as a universal statutory obligation. The business should assess its activities, contracts, assets, people, customers, dependencies and ability to absorb a loss.

Public liability: required or optional?

There is no universal rule requiring every UK business to hold public liability insurance.

It may nevertheless be:

required by a customer, venue, landlord, platform or principal contractor;
expected for a tender or permit;
required under a sector-specific scheme or rule;
prudent where the business interacts with the public, visits customer sites or could damage third-party property.

Always identify the actual source of the requirement.

Professional indemnity: required or optional?

Professional indemnity insurance is compulsory for some professions and regulated practices, but not for every business that provides advice or services.

It can also be required by a customer contract or chosen voluntarily because allegations of error, omission, negligent advice or professional breach could cause financial loss.

The dedicated guide to who needs professional indemnity insurance explains how regulatory, professional, contractual and voluntary reasons differ.

Check:

the professional or regulatory rule;
minimum terms and limits;
whether cover is claims-made;
retroactive dates;
notification requirements;
run-off obligations;
contractual requirements that exceed the professional minimum.

Cyber insurance and legal compliance

Data-protection and cyber-security duties do not arise merely because a business buys cyber insurance, and buying a policy does not discharge those duties.

The National Cyber Security Centre has stated that cyber insurance should not be treated as an alternative to good cyber security. A policy may support incident response or financial recovery, but security, legal compliance and operational resilience require separate controls.

How to verify an insurance requirement

Step 1: identify the source

Record the exact statute, regulation, regulator rule, professional-body provision, licence condition or contract clause. Avoid relying on a summary that does not link to the controlling source.

Step 2: check the current version and date

Rules change. Confirm that the provision is in force and use the version applying to the relevant period.

Step 3: confirm scope

Check:

legal entity;
activity;
worker, member, customer or vehicle status;
territory and jurisdiction;
exemption or threshold;
start and end date.

Step 4: extract the insurance specification

Record:

cover type;
minimum limit and whether it is per claim, per event or aggregate;
required insurer status;
excess restrictions;
minimum terms;
run-off or retroactive requirements;
evidence and notification requirements.

Step 5: compare with the issued policy

Read the wording, schedule, endorsements and certificate together. Confirm that the correct entity, activity, territory, limits and period are shown.

Step 6: record the conclusion and reviewer

Keep the source, access date, documents compared, unresolved issue and person responsible. Set a review trigger for renewal, contract change, regulatory update or business change.

Requirement-checking record

Field	Record
Requirement category	Statutory / regulatory or professional / contractual / voluntary
Exact source and locator
Current as at
Entity or activity in scope
Territory or jurisdiction
Exemptions considered
Required cover and limit
Required wording, insurer or excess terms
Evidence required
Policy documents checked
Difference or uncertainty found
Action and owner
Next review trigger

Common mistakes

Saying “legally required” when the source is only a customer contract.
Treating Great Britain legislation as automatically applying in Northern Ireland.
Using an old professional-body summary instead of the current rule.
Checking only the certificate and not the wording, schedule and endorsements.
Assuming a headline limit has the required basis.
Failing to match the policyholder to the contracting or regulated entity.
Ignoring run-off, retroactive, insurer-status or minimum-wording requirements.
Assuming a voluntary cover is unimportant because it is not compulsory.
Treating insurance as a substitute for legal, safety, cyber or professional duties.

Important limitations

This page provides a framework, not a complete register of every UK insurance obligation. Requirements depend on activity, status, contract, profession, licence and jurisdiction.

For a significant legal or contractual question, use the current official source and obtain appropriately qualified advice. For policy suitability and placement, consult an appropriately authorised insurance professional.

Next step

Use Understanding Business Insurance Documents to compare a requirement with the issued policy, then record the result in the Business Insurance Review Checklist.