BP 15 04 Exclusion – Access or Disclosure of Confidential or Personal Material or Information

An Insurance Services Office (ISO) standard form. It excludes businessowners liability coverage for bodily injury, property damage and personal and advertising injury arising from access to or disclosure of confidential or personal material or information, including related notification, monitoring and extortion costs.

1. 12 23 edition

   Dec 2023, compared with 05 14Latest edition

   • The exclusion for loss of, damage to or inability to access electronic data, and its limited bodily injury exception, is no longer part of this endorsement.

     05 14

     “Damages arising out of the loss of, loss of use of, damage to, corruption of, inability to access, or inability to manipulate electronic data”

     12 23

     Removed

   • The exclusion now applies to confidential or personal material as well as information, and lists biometric information.

     05 14

     Not in this edition

     12 23

     “Health information, biometric information”

   • The list of excluded costs adds identity monitoring, data restoration and extortion expenses.

     05 14

     Not in this edition

     12 23

     “credit or identity monitoring expenses, forensic expenses, public relations expenses, data restoration expenses, extortion expenses”

Where filings record what this form replaced, they name earlier edition 05 14 and other forms VP 15 04. Only some filings record replacements.

• Edition in use: in the past 12 months, 12 companies filed the 12 23 edition.
• BP 18 04 (Exclusion – Violation Of Law Addressing Data Privacy) is filed alongside it most often, in 101 of the same filings (68%).

Data from admitted P&C filings with state insurance departments, submitted Oct 2021 to Sep 2026, excluding withdrawn and rejected filings. One filing can cover several affiliated companies.

• Chubb Limited GroupUses BP 15 04 in 2 filings
• Tokio Marine Holdings Incorporated GroupUses BP 15 04 in 2 filings

• BP 18 04Exclusion – Violation Of Law Addressing Data Privacy101 filings
• BP 15 06Exclusion – Access Or Disclosure Of Confidential Or Personal Material Or Information (Personal And Advertising Injury Only)98 filings
• BP 18 03Cyber Incident Liability Exclusion91 filings
• BP 05 95Electronic Data Liability – Limited Coverage Subject To Cyber Incident Exclusion81 filings
• BP 15 91Exclusion – Perfluoroalkyl And Polyfluoroalkyl Substances (PFAS)77 filings
• BP 18 09Exclusion – Electronic Data – Deletion Of Bodily Injury Exception60 filings
• BP 18 06Cyber Incident Liability Exclusion For Electronic Data Liability – Broad Coverage58 filings
• BP 18 05Electronic Data Liability – Limited Coverage Subject To Cyber Incident Exclusion, Deletion Of Bodily Injury Exception55 filings
• BP 18 07Cyber Incident Liability Coverage Subject To Each Cyber Incident Occurrence And Aggregate Limits54 filings
• BP 18 08Cyber Incident Liability Coverage And Electronic Data Liability Coverage Subject To Loss Of Electronic Data, Each Cyber Incident Occurrence And Aggregate Limits54 filings