General Insurance in India: Cyber, Property, Liability, and Business Risk Coverage Explained

General insurance — also called non-life insurance — is any insurance policy that provides coverage for assets, liabilities, and risks that are not related to human life. For Indian businesses, general insurance is the financial safety net that keeps operations running when a warehouse burns down, a cyberattack cripples internal systems, or a client files a lawsuit alleging professional negligence.

Despite its importance, general insurance remains deeply underutilised in India. According to IRDAI's Annual Report for FY 2024-25, India's overall insurance penetration stands at approximately 3.7 percent of GDP — well below the global average of around 7 percent. Non-life insurance penetration is even lower, at roughly 1 percent, compared to 3.1 percent globally. The protection gap is especially acute for small and medium enterprises, where many owners either assume they are covered under personal policies, rely on verbal assurances from vendors, or simply defer the decision because they do not know where to start.

The consequences of underinsurance are severe. A single uninsured fire event can wipe out years of capital accumulation. A data breach that goes uninsured can trigger regulatory fines, forensic investigation costs, customer notification expenses, and reputational damage that collectively run into crores. A directors and officers claim from an aggrieved investor can personally expose promoters of a startup who assumed limited liability meant complete protection.

This guide is written for Indian SME founders, CFOs, and business owners who want to move from reactive to deliberate in their approach to risk management. It covers every major category of general insurance relevant to businesses operating in India, the IRDAI framework that governs it, and a practical methodology for building an insurance program that actually reflects the risks your business carries.

The Insurance Regulatory and Development Authority of India (IRDAI) is the statutory body established under the IRDAI Act, 1999, that regulates the insurance sector in India. For general insurance, IRDAI performs four primary functions: licensing insurers and intermediaries, approving and filing products, setting solvency and capital standards, and adjudicating policyholder grievances through the Insurance Ombudsman mechanism.

As of April 2026, there are 27 general insurance companies operating in India, including public sector giants such as New India Assurance, Oriental Insurance, United India Insurance, and National Insurance Company, as well as private sector players such as ICICI Lombard, HDFC ERGO, Bajaj Allianz, and Tata AIG, among others. Specialised insurers like Agriculture Insurance Company (AIC) and Export Credit Guarantee Corporation (ECGC) also operate within the framework for specific sectors.

**Key regulatory instruments every business buyer should be aware of include:**

In 2024, IRDAI introduced its landmark insurance reforms under the "Insurance for All by 2047" vision, which included use-and-file product filing (allowing insurers to launch products without prior approval), expanded bancassurance and online distribution, and a composite licence framework allowing a single entity to sell life, non-life, and health insurance. These reforms have materially expanded the product range available to business buyers and increased pricing competition across commercial lines.

For businesses, the most important regulatory protection is the mandate requiring insurers to settle or reject claims within 30 days of receiving the last relevant document. If a claim is delayed without sufficient reason, the insurer must pay interest at the bank rate plus two percentage points. This gives commercial policyholders a meaningful enforcement lever that many do not know exists.

General insurance in India spans a wide product universe. For businesses, the relevant categories can be organised into physical asset covers, liability covers, and specialty risk covers.

**Physical Asset Covers**

These protect tangible assets — buildings, plant, machinery, stock, goods in transit, and vehicles — from physical damage or loss due to named perils or, in the case of All Risk policies, any sudden and accidental cause not specifically excluded.

**Liability Covers**

These protect the business from legal claims made by third parties — customers, employees, regulators, investors, or the public — arising from the business's actions, products, services, or decisions. Unlike asset covers, liability policies respond to what the business does rather than what happens to it.

**Specialty Risk Covers**

These address risks that have emerged or grown in importance in recent years: cyber threats, financial crimes, environmental damage, and the personal liability of company directors.

The table below provides an overview of the major product categories, their primary trigger events, and who typically buys them:

The choice of which covers to buy, in what amounts, and from which insurer is the central question of building a business insurance program — and it is covered in detail in a later section of this guide.

For most businesses that own or occupy physical premises — factories, offices, retail outlets, warehouses, or hotels — property insurance is the foundational cover. In India, this is structured primarily as a Standard Fire and Special Perils (SFSP) policy, which covers loss or damage to buildings and contents caused by a specified list of perils.

**The standard perils covered under an SFSP policy include:**

- Fire and explosion (with some exclusions for boilers and pressure vessels) - Lightning - Aircraft damage - Riot, strike, and malicious damage (RSMD) - Storm, cyclone, typhoon, tempest, hurricane, tornado, flood, and inundation - Impact damage from vehicles or animals - Subsidence and landslide (including rockslide) - Bursting or overflowing of water tanks, pipes, or apparatus - Missile testing operations - Leakage from automatic sprinkler installations - Bush fire

Earthquake cover is available as an add-on and is strongly recommended for businesses located in seismic zones III, IV, and V — which includes large swaths of northern India, the northeast, the Andaman and Nicobar Islands, and parts of Maharashtra and Gujarat.

**Valuation and Sum Insured**

The most common and expensive mistake businesses make with property insurance is underinsurance. The sum insured must reflect the reinstatement value — the cost of rebuilding or replacing the asset at current prices — not the book value, depreciated value, or purchase price. In an environment where construction costs have risen sharply post-COVID, a factory insured at its 2019 construction cost may be covered for 60 percent of its actual replacement value. If a partial loss occurs, the insurer applies the average clause: the claim payout is reduced proportionally to the degree of underinsurance.

For example, if a building worth Rs. 5 crore at reinstatement value is insured for Rs. 3 crore (60 percent), and a fire causes Rs. 1 crore of damage, the insurer pays only 60 percent of the claim — Rs. 60 lakh — leaving the business to bear Rs. 40 lakh out of pocket.

**Business Interruption (BI) Cover**

Property damage alone does not capture the full economic impact of a loss event. If a fire destroys a manufacturing plant, the direct loss may be Rs. 2 crore, but the loss of revenue and increased costs of working during the 18 months it takes to rebuild could be Rs. 8 crore. Business interruption insurance — typically bought as an add-on to the SFSP policy — covers the gross profit lost and additional expenses incurred during the indemnity period.

BI cover requires careful structuring. The sum insured should be the gross profit (revenue minus variable costs) for a 12 or 24-month indemnity period, depending on how long the business realistically needs to rebuild and return to normal trading. Most businesses underinsure BI even more severely than property.

**Approximate Premium Range**

Property insurance premiums depend on the construction type (RCC versus non-RCC), occupancy (office versus chemical plant), sum insured, and location. Indicative rates for standard commercial risks range from 0.05 percent to 0.35 percent of the sum insured per annum, with higher-risk occupancies such as chemical storage, timber processing, or paper mills attracting higher rates.

Marine insurance in India covers two distinct exposures: marine cargo (goods in transit by sea, air, road, or rail) and marine hull (the physical vessel). For most businesses that are not in the shipping industry, marine cargo is the relevant product.

Under the Indian contract of sale, the party responsible for insuring goods during transit depends on the Incoterms agreed in the contract. Exporters selling on CIF (Cost, Insurance, Freight) terms are responsible for insuring the cargo up to the destination port. Importers buying on FOB (Free on Board) terms are responsible from the moment the goods leave the origin port. Domestic traders and distributors are responsible for goods moving within India by road or rail.

**Marine cargo policies are available in two broad forms:**

Specific Voyage Policies cover a single shipment from one point to another. They are suitable for occasional shippers.

Open Cover Policies (also called annual policies or floating policies) cover all shipments during a policy year up to a maximum value per conveyance. They are suitable for businesses with regular import or export activity, as they eliminate the need to arrange insurance for each individual consignment.

The Institute Cargo Clauses (ICC), which are internationally standardised, define the scope of cover:

For Indian importers and exporters, ICC (A) is recommended for most manufactured goods, electronics, pharmaceuticals, and perishables. ICC (C) is generally used for commodities like coal, iron ore, and fertilisers where the cost of broader cover is not justified.

**Inland Transit Cover**

Domestic goods movement — trucks, trains, couriers — is covered under inland transit policies, which function similarly to marine cargo but apply to overland movement. Given the high rate of road accidents in India and the frequency of goods theft from trucks, inland transit cover is essential for any business moving significant volumes of goods by road.

Any business that operates a fleet of vehicles — delivery trucks, company cars, service vehicles, or construction equipment — requires motor insurance. In India, third-party (TP) motor insurance is mandatory under the Motor Vehicles Act, 1988. Driving or operating a vehicle without at least third-party cover is a criminal offence.

**For businesses, a comprehensive motor policy combines two components:**

Third-Party Liability covers bodily injury, death, or property damage caused to third parties (pedestrians, other vehicles, property owners) by the insured vehicle. Third-party premiums for commercial vehicles are set by IRDAI on an actuarial basis and are not negotiable.

Own Damage (OD) Cover covers physical damage to the insured vehicle itself from accidents, fire, theft, natural calamities, and malicious damage. OD premiums are market-determined and vary by insurer, vehicle type, age, cubic capacity, and location.

For fleet operators — businesses with five or more commercial vehicles — a fleet policy offers administrative convenience and often a volume discount compared to individual policies. Fleet managers can also negotiate claims handling arrangements with the insurer to expedite repairs and minimise downtime.

**Key add-ons relevant to business fleet operators include:**

- Zero Depreciation Cover: Eliminates the deduction of depreciation on replaced parts during a claim, giving full replacement value up to the policy year. - Engine Protection Cover: Covers consequential damage to the engine from water ingression or oil leakage — a common exclusion in standard policies. - Return to Invoice Cover: Pays the original invoice value of the vehicle in case of total loss, rather than the depreciated IDV (Insured Declared Value). - Loss of Use / Downtime Cover: Compensates for revenue lost while a commercial vehicle is off the road for repairs.

For businesses with drivers on payroll, Workmen's Compensation (WC) insurance or Employer's Liability (EL) cover should be purchased alongside the motor policy to cover injury to drivers during the course of employment — a risk that is not covered by the motor policy itself.

Cyber insurance has gone from a niche product for large IT companies to one of the most important — and fastest-growing — covers for Indian SMEs. The reasons are not difficult to understand. India experienced over 13 lakh cybercrime cases in FY 2024-25 according to the Indian Cyber Crime Coordination Centre (I4C). Ransomware, phishing, business email compromise, and data breaches are no longer confined to large corporations — small businesses are increasingly targeted precisely because their defences are weaker.

A standard cyber insurance policy for Indian businesses covers some combination of the following:

First-Party Costs (costs borne by the business itself): - Incident Response: Forensic investigation to determine how the breach occurred - Data Recovery: Costs of restoring encrypted or corrupted data - Business Interruption: Revenue lost and extra costs incurred while systems are down - Ransomware Payment: The ransom amount itself (subject to regulatory permissibility) - Notification Costs: Costs of notifying affected customers, employees, or regulators under applicable law - Crisis Communication: PR and reputation management costs post-breach - Regulatory Defence Costs: Legal costs of defending regulatory investigations

Third-Party Liabilities (claims made against the business by others): - Data Breach Liability: Claims from customers or employees whose data was compromised - Network Security Liability: Claims arising from transmission of malware to third-party systems - Media Liability: Defamation or copyright infringement claims arising from digital content - Regulatory Fines and Penalties: Coverage for fines imposed by regulators (subject to insurability under applicable law)

**Why Cyber Insurance Is Especially Urgent for Indian SMEs**

The Digital Personal Data Protection Act, 2023 (DPDP Act) has materially changed the regulatory landscape. Businesses that suffer data breaches involving personal data of Indian citizens are now required to notify the Data Protection Board and affected data principals. Penalties under the DPDP Act can reach Rs. 250 crore for serious violations. While insurance cannot cover intentional regulatory violations, it can cover defence costs, notification expenses, and penalties imposed without proof of intent.

For e-commerce platforms, fintech companies, healthcare providers, and any business that stores customer payment or personal data, a minimum cyber cover of Rs. 5 crore is a reasonable starting point. Larger platforms or those that process significant volumes of sensitive data should conduct a cyber risk quantification exercise before choosing a limit.

**Indicative Premium Rates**

Premiums vary significantly based on industry sector, IT security posture, claims history, and the specific coverages included. Insurers increasingly require evidence of basic cybersecurity hygiene — multi-factor authentication, endpoint protection, regular backups, and incident response plans — before offering cover.

Directors and Officers (D&O) insurance protects the personal assets of company directors, officers, and senior managers from claims alleging wrongful acts in the discharge of their managerial responsibilities. A wrongful act is broadly defined to include any actual or alleged error, misstatement, misleading statement, act, omission, neglect, or breach of duty.

For Indian startups and scale-ups that have raised institutional capital, D&O insurance is no longer optional. The following scenarios illustrate why:

Investor Claims: A venture capital fund that invested in a Series B round alleges that the founders misrepresented revenue projections during the fundraise, causing the fund to overpay. The founders may be personally named in the suit alongside the company.

Regulatory Actions: SEBI investigates trading activity around a pre-IPO secondary transaction and issues notices to the CFO and CEO alleging violations of insider trading regulations.

Employee Claims: A senior employee who was terminated alleges wrongful dismissal and discrimination, naming the managing director personally.

Creditor Claims: A bank whose loan has gone into default sues the directors personally for alleged financial mismanagement under the Insolvency and Bankruptcy Code (IBC).

**Structure of D&O Insurance**

D&O policies are structured around three insuring agreements, commonly known as Side A, Side B, and Side C:

For unlisted startups, Side A and Side B are most relevant. Listed companies and companies preparing for an IPO need Side C entity cover as well, to address securities class actions and regulatory proceedings.

**Why Founders Underestimate D&O Risk**

Many startup founders believe that the limited liability structure of a private limited company shields them from personal claims. This is partially true — shareholders cannot normally sue directors for ordinary business losses. But the protection disappears when claimants allege a wrongful act: misrepresentation, breach of fiduciary duty, regulatory violation, or personal dishonesty. In these cases, courts and regulators can pierce the corporate veil and pursue personal assets. D&O insurance exists precisely to fund the defence costs (which alone can run into lakhs or crores) and any settlement that follows.

A Rs. 5-10 crore D&O policy for a funded Indian startup typically costs between Rs. 2-8 lakh per year, depending on the stage of funding, the sector, and the company's governance track record.

Professional Indemnity (PI) insurance — also called Errors and Omissions (E&O) insurance — protects businesses and individuals who provide professional services from claims alleging that a service was performed negligently, incorrectly, or not at all, resulting in financial loss to the client.

In India, the following professionals and service businesses are the primary buyers of PI insurance:

- Chartered Accountants and audit firms - Lawyers and law firms - Management consultants - IT and software development companies - Architects and structural engineers - Medical professionals and hospitals - Recruitment and HR advisory firms - Insurance brokers and investment advisers

A PI claim arises when a client suffers a financial loss attributable to advice or services provided. For example:

- A CA firm prepares financial statements with a material error that causes an investor to overvalue the target in an M&A transaction. The investor sues the CA firm for the loss. - A software company delivers a product with a bug that causes the client's payment system to go down for three days. The client claims Rs. 1.5 crore in lost revenue. - An architect's design error causes structural problems in a commercial building. The property developer sues for repair costs and loss of rental income.

PI policies are written on a claims-made basis — the policy in force at the time the claim is made (not when the error occurred) responds to the claim. This creates an important obligation: businesses must maintain continuous PI cover without gaps, and must purchase retroactive coverage that goes back to the date from which they want protection. A gap in coverage can leave an entire historical period unprotected even if a new policy is subsequently purchased.

Premiums for PI insurance depend on the profession, annual fee income, claims history, and the retroactive date requested. A mid-sized chartered accountancy firm with annual fees of Rs. 3 crore might pay Rs. 1-2 lakh per year for Rs. 5 crore of cover. An IT services company with Rs. 50 crore in revenue would typically pay Rs. 5-15 lakh for Rs. 10-25 crore of cover.

General (Public) Liability Insurance

Public liability insurance covers the business for claims arising from bodily injury or property damage suffered by third parties — customers, visitors, contractors, or members of the public — on the business's premises or as a result of the business's operations.

This cover is essential for businesses where physical interaction with the public is central to operations: hotels, shopping malls, restaurants, hospitals, schools, construction sites, manufacturing plants, and event organisers. Under the Public Liability Insurance Act, 1991, certain categories of hazardous industries are legally required to maintain public liability cover.

For businesses not subject to mandatory requirements, public liability is still a critical purchase. A customer who slips and falls in a retail store, sustains a serious injury, and files a tort claim can result in a judgement running into tens of lakhs or more. Without insurance, the business bears the full cost of defence and any damages awarded.

**Workmen's Compensation (WC) Insurance**

Under the Employees' Compensation Act, 1923, employers are legally liable for compensating workers who suffer injuries, disabilities, or death arising out of and in the course of employment. WC insurance covers this statutory liability. The compensation amounts are set by the Act and depend on the nature and severity of the injury and the worker's wages.

For businesses with significant blue-collar or site-based workforces — construction contractors, logistics companies, factories, and mines — WC insurance is mandatory and should be purchased to cover the total wages of all workmen engaged.

**Product Liability Insurance**

Product liability covers claims arising from physical injury or property damage caused by a defective product manufactured, sold, or distributed by the insured business. In India, product liability claims have historically been settled through consumer courts under the Consumer Protection Act, 2019. The Act has expanded the definition of defective goods and the rights of consumers to claim compensation, increasing the exposure for domestic manufacturers and importers.

Pharmaceutical companies, food and beverage manufacturers, electronics producers, toy makers, and auto component suppliers are typical buyers of product liability insurance. Export-oriented manufacturers selling to the US or EU should note that foreign jurisdictions carry significantly higher product liability exposure and require correspondingly higher limits.

Building a business insurance program is not a one-time purchase decision. It is an ongoing risk management process that involves four iterative steps: risk identification, risk quantification, insurance structuring, and programme review.

**Step 1: Risk Identification**

Begin with a risk register that catalogues every significant risk the business faces. Group risks into physical (fire, flood, theft), operational (supply chain disruption, business interruption), liability (customer claims, regulatory action), people (key person loss, workplace injury), and financial (fraud, credit risk). For each risk, assess the likelihood and severity of a loss event.

**Step 2: Risk Quantification**

For each identified risk, estimate the maximum probable loss (MPL) — the largest loss that is realistically likely given a credible scenario. For property risks, this means an independent reinstatement valuation. For liability risks, this means reviewing the contracts you sign, the jurisdictions you operate in, and any mandatory minimum limits. For cyber risks, this means understanding what data you hold, what your contractual obligations to clients are, and what your regulatory exposure is under the DPDP Act.

**Step 3: Insurance Structuring**

Once risks are quantified, purchase insurance covers that address the largest and most impactful risks first. Use the following priority framework:

Work with a licensed insurance broker — not a direct-selling agent of a single insurer — to access the full market and negotiate terms. A good broker will also help you understand policy wordings, identify coverage gaps, and navigate claims.

**Step 4: Programme Review**

Review your insurance programme annually or whenever a material change occurs in the business — a new acquisition, entry into a new business line, a significant increase in headcount or revenue, or a major capital expenditure. Sum insured values must be updated at every renewal to reflect current replacement costs. Failure to update creates the underinsurance problem described in the property section above.

**Working with Insurance Brokers**

In India, insurance brokers are licensed by IRDAI under the Insurance Brokers Regulations, 2018. A direct broker represents the client's interests (unlike an agent who represents the insurer). For commercial insurance, a direct broker adds significant value in market access, policy negotiation, claims support, and risk advice. The broker's commission is paid by the insurer from the premium — there is typically no additional cost to the client. For complex or large-value risks, a reinsurance broker or composite broker may be appropriate.

When a loss event occurs, the way a claim is handled determines whether the insurance policy delivers its intended value. Understanding the claims process in advance is as important as choosing the right cover.

**Immediate Steps After a Loss Event**

1. Notify the insurer promptly: Most policies require notification within 24 to 48 hours of discovering a loss. Late notification can jeopardise the claim, even if the loss is otherwise covered. Call your insurer's 24/7 claims helpline immediately. 2. Preserve evidence: Do not clean up, repair, or discard damaged property before a surveyor has inspected it. Take photographs and videos of all damage. Secure CCTV footage if available. 3. Mitigate further loss: You have a duty to take reasonable steps to minimise the extent of the loss. This does not mean making permanent repairs — it means taking immediate temporary measures such as covering a damaged roof, moving undamaged stock to a safe area, or isolating a compromised IT system. 4. File an FIR if required: For theft, burglary, riot damage, or fraud, file a First Information Report (FIR) with the local police immediately. Insurers require a copy of the FIR for these claim categories. 5. Maintain detailed records of all expenses: From the moment of the loss, document every expense incurred — emergency repairs, temporary relocation costs, alternative suppliers, employee overtime. These records support your business interruption claim.

**The Surveyor's Role**

For most commercial claims above Rs. 50,000, IRDAI regulations require the insurer to appoint a licensed loss assessor or surveyor within 48 hours of notification. The surveyor assesses the cause and quantum of the loss, verifies coverage, and submits a report to the insurer recommending a settlement amount. You have the right to appoint your own independent surveyor (sometimes called an insurance loss assessor or public adjuster) to represent your interests in the process, particularly for large or complex claims.

**Regulatory Timeline**

Under IRDAI's Protection of Policyholders' Interests Regulations, insurers must: - Appoint a surveyor within 48 hours of claim notification - Receive the surveyor's report within 30 days of appointment - Settle or reject the claim within 30 days of receiving the last relevant document - Pay interest at the bank rate plus 2% if they fail to meet the settlement deadline

If you are dissatisfied with a claim settlement or rejection, you can escalate to the insurer's grievance redressal officer, then to the Insurance Ombudsman, and ultimately to the consumer court or civil court if necessary. IRDAI's Integrated Grievance Management System (IGMS) allows online tracking of complaints.

Understanding what your policy does not cover is as important as knowing what it does. Exclusions are the clauses in a policy that remove certain risks from the scope of cover. Failing to understand exclusions is one of the most common reasons businesses are surprised — and left unprotected — at the time of a claim.

**Standard Exclusions Across Most General Insurance Policies**

- War, nuclear risk, and terrorism (terrorism cover may be available as a separate add-on in some markets) - Wilful neglect or intentional damage: If the insured deliberately causes or contributes to the loss - Consequential loss: Standard property policies do not cover loss of profit or business interruption unless specifically added - Gradual deterioration: Normal wear and tear, corrosion, or gradual decay is not covered - Pre-existing damage: Damage that existed before the policy inception is excluded - Illegal activity: Losses arising from criminal or illegal acts of the insured

**Property-Specific Exclusions to Watch**

- Flood and earthquake are excluded under some standard policies and must be added explicitly - Electrical or mechanical breakdown of machinery is typically excluded from fire policies (covered under machinery breakdown or IAR policies instead) - Deterioration of perishable stock due to power failure is typically excluded unless a spoilage extension is added - Money, bullion, deeds, manuscripts are usually subject to separate sublimits or exclusions

**Cyber-Specific Exclusions**

- Acts of war or state-sponsored attacks: Many cyber policies exclude losses from nation-state cyber warfare — a significant concern given the frequency of geopolitical cyber incidents - Infrastructure failure: A power outage or cloud provider failure not caused by a cyberattack may be excluded - Reputational harm: The abstract reputational damage from a breach (as distinct from the measurable crisis communication costs) is typically not covered - Previously known vulnerabilities: If a breach exploits a vulnerability the insured was aware of and failed to patch, coverage may be disputed

**D&O-Specific Exclusions**

- Fraud and dishonesty: Losses arising from deliberate fraudulent acts by the insured director are excluded (though defence costs may be advanced until fraud is proven) - Bodily injury and property damage: D&O does not cover physical harm — that is what liability policies cover - Contractual liability: Liability assumed under contract beyond what would apply in law is often excluded - Insured vs insured: Claims by one insured director against another may be excluded to prevent collusive claims

**The Importance of Reading Policy Wordings**

Exclusions are not always clearly highlighted in the policy summary or the insurer's marketing materials. The definitive document is the policy wording — the full legal contract. Before binding a policy, ask your broker to walk you through the key exclusions, explain how they interact with your actual risk profile, and identify any covers that need to be added by endorsement. This 30-minute exercise can prevent a multi-crore dispute at the time of a claim.