Cyberinsurance with data protection for self-employed and SMEs

The risk is out there ... but so is the solution, because with the Santander MAPFRE cyberinsurance with data protection for self-employed and SMEs, you can safeguard your company or business against the main cybernetic risks and the consequences of a cyberattack.

Learn about the main items covered¹:

Damage to computer systems

Malicious IT actions, malware, data theft or denial of service.

Interruption of business

Covers loss of profit as the result of a failure in computer systems following a cyberattack.

Third-party liability for breach of privacy, multimedia and publicity

Damages or losses occasioned to third parties due to theft, loss or disclosure of confidential information and personal data, and the publication of any content entrusted for safekeeping, custody or control by the insured.

Data protection

• Fines and sanctions for breaches of data protection regulations.
• Costs of notifications due to a breach of privacy.
• Costs of restoration of image due to sanctions by the Data Protection Agency.

Cyberextortion threat

Expenses to protect computer systems and mitigate the consequences of a cyberextortion threat.

Technological assistance 24/7

Qualified technician and support for any kind of device. Assistance with security incidents.

You will also have essential technological services to enable your professional activity to resume normal service¹:

• Restoration of damaged software and recreation of data.
• Decontamination, cleansing and restoration of computer systems and data.
• Restoration of access control system.

And a package of preventive technological services you can make use of from day one, because we care about your peace of mind¹:

• Analysis of network vulnerabilities.
• Installation of antivirus along with anti-ransomware.
• Advice in relation to data protection.

With Cyberinsurance, you'll have access to a wide range of coverage¹ and services¹ suited to your business's needs. The annual insured sum is limited to €100,000, with a sublimit of €50,000 per claim.

Damage to your own computer systems:

Damage to or loss of data in computer systems, as the result of a non-physical event not covered by the policy (malicious IT action, malicious IT codes, data theft etc.). The costs of acquisition of software substitution licences are also covered, in addition to the following services:

• Costs of restoring and recreating data.

• Costs of decontaminating malicious IT codes.
  • Cover for own damages extends to the costs of recovery, restoration or recreation of software damaged, lost or destroyed, and the costs of recovery of the lost or destroyed data, in available copies.
  • In addition to the decontamination, cleansing and restoration of databases.

• Restoration of the access control system and security perimeter.
  • There is also cover for necessary outlays on recovery of system access and control.

• Professional fees.
  • The policy covers the fees of any experts required to manage the crisis or ascertain the origin of the damage caused by the non-physical event (assess the situation, quantify the damage and determine the measures to be established to minimise the consequences or contain the damage).

Interruption of business:

There is cover for any economic damage caused by the total or partial shutdown of computer systems following a non-physical event (cybernetic attack) covered by the guarantee for damage to computer systems.

Compensation will be limited to the following:

• EUR 600 per day.
• Over a maximum term of 7 days.
• With a grace period of 12 h following the IT failure.

Fines and sanctions for breaches of regulations:

Data protection cover applies to fines and administrative sanctions imposed on the process for inspection of a breach of privacy / data security.

Costs of notification:

• Legal advisory service to assess the breach and advise on suitable measures.
• Notification written by an advisor to the third party or employee affected by the data breach and costs of sending this.
• Establishment of a telephone service to handle incoming and outgoing calls in relation to the breach.
• Forensic investigation of computer systems, if required by law and official bodies.
• Publicity campaign to mitigate the impact of data breaches on the insured's brand or reputation.
• Costs of compliance with contractual obligations arising from notifications due to privacy breaches.

Costs of restoration of image following sanctions by the Spanish Data Protection Agency

Cover for the costs of professional advisory services in marketing, communication, advertising etc. to restore the commercial image or mitigate the damage caused by a sanction covered in the policy, imposed by the State Data Protection Agency.

Cybernetic extortion threat

All necessary costs (following authorisation) to protect the computer system or mitigate the consequences of the cyberattack are covered. In other words, the costs are covered so that the threat is not carried out. The expenses of professional advice in Marketing, Communication, Advertising are covered,... etc., to restore the commercial image or mitigate the damage, caused by a sanction covered by the policy, and imposed by the State Agency for Data Protection.

Third-party liability for breach of privacy

There is cover against any indemnity for which the insured may be civilly liable for any damages occasioned to a third party (owner of the data) arising from the alteration, erasure, publication, theft etc. of the data in its custody as the result of a breach of data privacy or security due to IT actions.

For information ranging from personal data to confidential data of individuals, as these data are protected by Spain's "LOPD" Organic Data Protection Law and the GDPR.

Third-party liability multimedia and publicity

There is cover for any damages or losses occasioned to third parties for the publication of any contents affecting and having repercussions on the assets of the data subject, as the result of a malicious IT action.

There is cover for the publication of any kind of information caused by an IT attack or malware occasioning damages to the assets of the third party, not the negligent publication of information by the insured or its employees.

Outlays on defence and civil liability guarantees

There will be cover for outlays on legal defence, civil liability guarantees and court costs, including the costs of any unfounded claims. Provided the item referred to in the claim is covered.

Preventive services

• Advice on adaptation to specific data protection regulations.
  • Failure to adapt to legal requirements may entail a breach of the privacy of personal data and confidential information, but simply failing to adapt may also incur inspections and sanctions.

• Installation of antivirus.
  • If no antivirus is in place, the company is defenceless against the simplest threat, and so an advanced security system is provided.

• Analysis of network vulnerability.

A full analysis of the network and the devices connected to it can provide a complete picture of the threat and of security deficiencies. In this way, the necessary measures may be taken and the deficiencies may be corrected.

Technological assistance 24/7

Assistance cover guarantees IT support by means of chats, phone-ins, remote control etc. to cover issues such as:

• Consultations in relation to the use of technological devices, usage of social media and Internet, purchases, digital certificates, security, and cloud storage.
• Assistance with the configuration of devices.
• Resolution of problems relating to devices and applications.