July 11, 2020

Volume X, Number 193

July 10, 2020

Subscribe to Latest Legal News and Analysis

July 09, 2020

Subscribe to Latest Legal News and Analysis

July 08, 2020

Subscribe to Latest Legal News and Analysis

Covington Internet of Things Update: Promise and Peril — IoT and Your Insurance

Two hundred billion IoT devices could be in use by 2020, according to one estimate cited in the World Economic Forum’s recent report, Mitigating Risk in the Innovation Economy.  This rapid integration of the digital world and the physical world presents unprecedented opportunities for businesses in a wide array of industries.  But it also creates unprecedented risks.  Despite ongoing efforts to create security standards for IoT devices — for example, the National Institute of Standards and Technology’s recent draft paper to this end — the security of such devices currently remains wanting.  With the cyber and physical worlds so closely intertwined, future hacking incidents may threaten not only electronic data, but also property and lives.

Policyholders adopting IoT and related technologies may face uncertainty over coverage for these so-called “cyber-physical” harms under commonly available insurance policy forms.  Most cyber insurance policies have expressly excluded coverage for bodily injury and property damage, while standard-form general liability and property policies may have exclusions that some insurers invoke to dispute coverage for cyber-related harms.  In recent years, however, new insurance policies and endorsements have emerged to address this coverage uncertainty by giving policyholders options for explicit coverage for physical damage from cyber attacks.

As policyholders adopt technology that links their physical systems to digital components, they should consider what potential real-world harms could result from their cyber-networked things — and whether their existing lines of insurance cover them.  Such policyholders may conclude that it is time to explore the newer insurance products specifically geared towards cyber-physical risks.  Even these purpose-built policies and endorsements call for careful scrutiny and potential negotiation, however, because they are not standardized. Not only do policy wordings vary, but so do individual policyholders’ risk exposures. For example, a policyholder that may be an especially attractive target for state-sponsored hacking may need to pay particular attention to the wording of exclusions such as the common “war” and “terrorism” exclusions.  Guidance from experienced coverage counsel and sophisticated insurance brokers is useful, if not essential, for those exploring this relatively novel territory.

© 2020 Covington & Burling LLPNational Law Review, Volume VIII, Number 65


About this Author

John G. Buchanan III, Covington, Insurance litigation attorney
Senior Counsel

John Buchanan, senior counsel in Covington's Washington office and the firm's first Insurance Practice Group Coordinator, has represented policyholders in insurance coverage advocacy, dispute resolution and counseling for over three decades. His career has ranged from the early DES and asbestos coverage litigation to claims for some of the largest cyber losses in history. Mr. Buchanan has litigated, arbitrated or negotiated a wide variety of complex property and casualty insurance claims, from railroad derailment claims to satellite-in-orbit claims, and from silver-theft...

202 662 5366
Dustin Cho, Covington, litigation lawyer

Dustin Cho is a commercial litigator who focuses on representing corporate policyholders in coverage disputes with their insurers. Mr. Cho also represents media and technology clients in litigation and advises on policy and regulatory issues.

Representative Matters

  • Representing the National Football League in insurance coverage litigation relating to lawsuits filed by former NFL players seeking to hold the League liable for injuries associated with the long-term effects of concussions.
  • Advising policyholders regarding coverage for a wide variety of liability claims, including under general liability, professional liability, product liability, employers' liability, and other insurance policies.
  • Representing media companies in litigation in federal court, arbitration, and federal agencies such as the FCC and the Copyright Royalty Board in commercial disputes.
  • Advising technology companies regarding copyright, online gaming, and esports issues.
Patrick Raswthorne, Covington, Litigation attorney

Patrick Rawsthorne is an associate in the Insurance Recovery Practice Group. Before joining Covington, Mr. Rawsthorne clerked for the Honorable David W. McKeague of the United States Court of Appeals for the Sixth Circuit.

Mr. Rawsthorne is a member of the Bar of Michigan. District of Columbia bar application pending; supervised by principals of the firm.