What it does

CU 21 86 excludes injury or damage arising from access to or disclosure of confidential or personal information and from loss of or damage to electronic data, with a limited exception for bodily injury. ISO's 12 20 edition was titled "...Personal Information And Data-Related Liability"; the 12 23 edition refers to "Personal Material Or Information". CU 21 88 is the Coverage B-only version.

Who needs it

Attached broadly; most commercial umbrellas now carry a data exclusion.

How it fits the umbrella

The umbrella has its own exclusions that apply whether or not the underlying policies cover the claim, and many ISO umbrella exclusion endorsements mirror a CGL or auto exclusion so that the umbrella does not drop down where the underlying is excluded. When an underlying policy carries an exclusion, check that the umbrella carries the matching CU endorsement, or explain the gap if it does not.

Quoting and selling notes

  • Refer data breach exposure to a cyber policy.

Related forms

See CU 21 88, CU 34 56, CU 00 05.