BP 18 04 Exclusion – Violation of Law Addressing Data Privacy

An Insurance Services Office (ISO) standard form. It excludes businessowners liability for bodily injury, property damage and personal and advertising injury arising from actual or alleged violations of laws on collecting, using, storing or sharing personal or confidential information, such as BIPA, CCPA and GDPR.

• Edition in use: in the past 12 months, 10 companies filed the 12 23 edition.
• BP 18 03 (Cyber Incident Liability Exclusion) is filed alongside it most often, in 113 of the same filings (71%).

Data from admitted P&C filings with state insurance departments, submitted Oct 2021 to Sep 2026, excluding withdrawn and rejected filings. One filing can cover several affiliated companies.

• Chubb Limited GroupUses BP 18 04 in 3 filings
• Tokio Marine Holdings Incorporated GroupUses BP 18 04 in 2 filings

• BP 18 03Cyber Incident Liability Exclusion113 filings
• BP 15 91Exclusion – Perfluoroalkyl And Polyfluoroalkyl Substances (PFAS)109 filings
• BP 15 04Exclusion – Access Or Disclosure Of Confidential Or Personal Material Or Information101 filings
• BP 05 95Electronic Data Liability – Limited Coverage Subject To Cyber Incident Exclusion85 filings
• BP 15 06Exclusion – Access Or Disclosure Of Confidential Or Personal Material Or Information (Personal And Advertising Injury Only)70 filings
• BP 18 09Exclusion – Electronic Data – Deletion Of Bodily Injury Exception58 filings
• BP 18 06Cyber Incident Liability Exclusion For Electronic Data Liability – Broad Coverage56 filings
• BP 18 05Electronic Data Liability – Limited Coverage Subject To Cyber Incident Exclusion, Deletion Of Bodily Injury Exception54 filings
• BP 18 07Cyber Incident Liability Coverage Subject To Each Cyber Incident Occurrence And Aggregate Limits53 filings
• BP 18 08Cyber Incident Liability Coverage And Electronic Data Liability Coverage Subject To Loss Of Electronic Data, Each Cyber Incident Occurrence And Aggregate Limits53 filings