Liability Insurance Checklist 2026: What Small Firms Overlook

Most small businesses buy general liability because a landlord, client or licence requires it. That policy covers a narrow set of third-party injuries and property damage. It does not cover professional mistakes, employee injuries, cyber losses, contractual promises or every vehicle on the road. The gaps are where serious claims live, and they are rarely obvious from the certificate of insurance.

General liability versus professional liability

General liability responds when someone is hurt or property is damaged because of your premises or operations. Professional indemnity, sometimes called errors and omissions, responds when a client loses money because of your advice, design, service or failure to perform. A consultant, accountant, designer or software provider usually needs both. A trades business may need professional cover for design work even if most of its revenue comes from installation.

The distinction matters at claim time. If a client claims your report caused a lost deal, general liability will likely decline because there was no bodily injury or physical damage. If a visitor trips in your office, professional indemnity will not respond. Review the activities listed on each policy and make sure they match the work you actually sell.

Contractual liability and the promises you sign

Client contracts often require you to indemnify them for losses, name them as an additional insured, or maintain limits far above your current policy. Signing those terms can create an obligation that your insurance does not cover. Before signing, send the insurance clause to your broker and ask three questions: does our policy respond to this promise, does the additional-insured requirement cost extra, and is the required limit available?

Be equally careful with subcontractors. Their insurance may not protect you if they cause a loss, and your policy may exclude liability arising from their work. Require a certificate of insurance, check the limits and expiry date, and confirm that your contract passes the right obligations down the chain. A one-page subcontractor checklist prevents a recurring argument after an incident.

"The claim does not read your intentions. It reads the contract and the policy wording."

Cyber, employer and auto gaps

Cyber liability covers incidents such as data breach, ransomware, business email compromise and the cost of notification and recovery. Many general liability policies exclude or sharply limit these losses. If you hold customer data, take card payments or rely on email to authorise payments, treat cyber cover as a core policy rather than an optional extra. Check whether social engineering and funds-transfer fraud are included.

Employer liability or workers compensation is usually mandatory once you hire staff, with rules varying by jurisdiction. Commercial auto is separate from personal car insurance; using a personal vehicle for business may leave a gap if the insurer excludes business use. If staff drive their own cars for work, confirm whether hired and non-owned auto cover is included. These are ordinary exposures that owners routinely assume are covered.

The small-firm liability checklist

Work through this list with your broker and keep the answers with your policy documents. Which entities and trading names are insured? Which activities and locations are listed? What limits apply per claim and in aggregate? Is defence costs inside or outside the limit? What exclusions could affect our main services? Are subcontractors and temporary staff covered? Does the policy cover work performed abroad? What are the notification deadlines? Who is responsible for reporting an incident?

Then test the list against a real scenario. Imagine a customer sues over a delayed project, a laptop with client data is stolen, or an employee is injured at a client site. For each event, identify which policy responds, what the deductible is, and who you would call. If any answer is unclear, fix it before renewal rather than hoping the question never arises.

Claims behaviour and documentation

Insurers expect prompt notice. Report any incident that could become a claim, even if the amount is uncertain, and keep a written record of dates, people, witnesses and costs. Do not admit liability or offer to settle without checking with the insurer, because a careless email can complicate the defence. Cooperate fully and keep copies of everything you send.

Review your liability programme after every significant change: a new contract type, a new country, a new software platform, a new employee or a new vehicle. The goal is not the cheapest certificate; it is a clear match between the promises you make and the cover you hold. That match is what turns a potential catastrophe into a manageable event.

The bottom line

Treat general liability as a floor, not a complete programme. Add professional, cyber, employer and auto cover where your operations create the exposure, read the contractual promises you sign, and confirm the limits are real rather than nominal. Review the whole package annually and after any change. A short checklist now is far cheaper than an uncovered claim later.