The immediate cause decides which policy to check first. Cyber may address malicious access. Electrical failure, spoiled stock and lost income may require separate cover.
Which policy pays when shop tech fails?
Is it a hack or a hardware failure?
A cyber event involves malicious or unauthorised digital access. Examples include ransomware and stolen passwords.
Equipment breakdown is more relevant to sudden electrical or mechanical failure. Maintenance exclusions may still apply.
The cause matters more than the device.
Can one outage create several claims?
One incident can create investigation, privacy, stock and trading losses. Identify each loss before assuming one policy will respond.
A connected-shop incident can involve more than cyber insurance and equipment breakdown. Property cover may respond to insured physical damage to owned equipment.
Equipment breakdown is for sudden mechanical or electrical failure. It may include spoiled stock only where the wording says so.
Business interruption usually needs a covered trigger. It may also have a waiting period.
General liability is more relevant if a faulty installation hurts a customer. It can also apply if it damages third-party property.
Product liability may matter where the retailer makes, imports or supplies the defective connected product.
Crime cover can address defined employee dishonesty, social engineering or theft exposures. It does not cover every stock difference.
Privacy liability can address claims and response costs from handling personal data. It does not cover replacement of the camera itself.
Ask the insurer one precise question: “If a remote compromise causes camera investigation costs, a six-hour till outage and spoiled refrigerated stock, which sections respond?” Also ask about sub-limits and waiting periods. A business-interruption excess is often between 8 and 24 hours. A short outage may produce no payment.
Match each retail device to the right cover
List every connected device, its supplier, data, network and likely loss. Then compare that loss with the relevant policy section.
| Shop system | Loss to check | First cover to review | Common wording gap |
|---|
| IP CCTV | Stolen footage, legal advice | Cyber and privacy liability | Hardware replacement |
| AI camera | Facial-data complaint | Privacy liability | Fines may be excluded |
| Smart fridge sensor | Spoiled stock | Equipment breakdown or stock deterioration | Calibration or wear |
| Connected POS | Lost sales and card-data breach | Cyber and business interruption | Supplier or telecoms outage |
| RFID reader | Wrong stock records or theft | Crime or equipment breakdown | Normal inventory error |
Which cover fits a POS outage?
A POS outage may involve card data, fraud and lost turnover. Check cyber interruption and crime cover.
Also check dependent-supplier definitions. This matters where tills rely on cloud services.
Who pays for spoiled chilled stock?
Spoiled stock depends on the trigger. It could be a hack, power cut, refrigeration fault or missed alert.
Keep temperature logs, service records and disposal photographs. These records can show what happened and when.
A simple loss route
Start with the trigger, then follow the loss
Camera, sensor or till fails
→
Hack, fault, damage or supplier outage?
→
Data, stock, sales or injury loss?
→
Check the matching policy section
CCTV can create privacy claims before a breach
CCTV can identify customers, staff and passers-by. Footage therefore needs lawful, fair and limited processing under UK GDPR.
A camera can cause a privacy issue without being hacked.
Does facial recognition change the risk?
Facial recognition can identify people. It may process specially protected biometric data.
Document why you need it. Consider less intrusive options.
Check whether privacy cover includes defence costs. Do not assume it includes regulatory fines.
Keep footage only as long as needed for its stated purpose. Set a written retention period.
Restrict access and delete footage reliably. Long retention can raise privacy risk.
Can an installer still view live cameras?
Give suppliers named accounts. Require multi-factor authentication.
Remove access when work ends. Keep cameras separate from payment terminals.
Avoid exclusions that leave shop systems uninsured
Before renewal, review schedules and supplier contracts. Exclusions, sub-limits and security conditions can decide the claim.
Check limits, waits and named suppliers
Check sub-limits for spoilage, privacy, restoration and dependent interruption. Also check waiting periods and named-supplier requirements.
A headline limit may not fund a short outage. A £100,000 cyber limit can still have smaller limits elsewhere.
The most frequent mistake is checking only the headline cyber limit.
Prepare the first 24 hours
Isolate affected devices and preserve logs and records. Tell the insurer promptly.
Do not reset equipment before incident-response advice. Safety needs may make an immediate reset necessary.
Do not assume broad cyber cover includes every retail IoT exposure. Policies may restrict cyber war, infrastructure outages and utility interruption.
They may also restrict defective design, wear and tear, or supplier failure. The supplier must fit the dependent-supplier definition.
Security conditions can matter. An insurer may require multi-factor authentication, supported software, backups or prompt patching.
Breaking a condition can affect cover. The outcome depends on the wording and facts.
Regulatory fines may be uninsurable or expressly excluded. Bodily injury and physical property damage often go to liability or property sections.
Compare the total limit with each sub-limit. Check forensic work, restoration, privacy liability, spoiled stock and contingent business interruption.
This subject is less relevant without internet-connected cameras, sensors, smart tills or cloud-managed shop devices. It cannot decide whether a claim will be paid. The schedule, endorsements, incident facts and insurer’s decision control the outcome.
Frequently asked questions
Does cyber insurance cover IoT devices?
Cyber insurance may cover a cyber event involving IoT devices. It does not usually cover ordinary mechanical failure.
Check equipment breakdown cover for hardware faults. Policy wording decides the final answer.
Does cyber insurance pay for spoiled fridge stock?
Cyber insurance may pay where a covered cyber event caused spoilage. Faulty probes, refrigeration failures and power cuts may need other cover.
Check the spoilage limit and the policy trigger. Keep temperature and disposal records.
Yes, CCTV footage is personal data where people are identifiable. Identification can be direct or indirect.
Facial recognition, audio and long retention raise the risk. Limit access to authorised staff and suppliers.
Can an ICO fine be insured?
An ICO fine may be uninsurable or excluded under the policy. Investigation and legal costs may sometimes be covered.
Read the privacy liability wording. Do not treat a defence-cost limit as fine cover.
What should a shop do in the first 24 hours?
Isolate the device, preserve evidence and contact the incident line. Do not erase footage or reset equipment without advice.
Reset equipment only where safety requires it. Record who acted and at what time.
The essentials:- Match the trigger, not the gadget, to the relevant insurance section.
- Check spoilage sub-limits and business-interruption waiting periods before renewal.
- Treat CCTV as personal-data processing, especially where AI, audio or supplier access is involved.
- Separate cameras and sensors from payment systems, then document the control.
A practical renewal plan for shop technology
Make a one-page register of connected devices, suppliers, data and likely losses. Get written confirmation about cloud outages, defects, spoilage, costs and waiting periods.
Review firmware and authentication every three months. This can reveal gaps before renewal.
For underwriting, prepare evidence instead of only listing devices. Record each IP CCTV system, AI camera and smart fridge sensor.
Also record each connected POS and RFID reader. Name its owner, firmware status and remote-access route.
List the cloud provider, data collected and business dependency. This gives insurers a clearer picture of the risk.
Insurers often ask if administrator accounts have MFA. They also ask if cameras are separate from payment networks.
They may ask how quickly you apply critical patches. They may also ask whether you test backups.
Insurers can ask who reviews temperature logs and alert failures. Keep service and calibration records for refrigeration controls.
Remove installer access when work ends. Practise an escalation route for store managers.
This register supports a more accurate declaration. It can reveal dependencies that lead to disputed interruption or spoiled-stock claims.
A simple record can prevent a costly argument later.
Related sources
These articles can help you explore the topic in more depth:
