$2M Professional Liability (E&O) Insurance for IT Consultants

For IT consultants facing a $2M contract clause: it usually means $2M per claim in Professional Liability (E&O), often as Technology E&O with Cyber, and a $1M/$2M policy may not meet it.

What does a $2M requirement mean for IT consultants?

Professional Liability (E&O, short for Errors and Omissions) covers claims that a mistake in your work cost a client money. IT consultants usually buy Technology E&O rather than Miscellaneous E&O (see Technology E&O vs. Miscellaneous E&O). A $2M clause in an MSA may read like this:

• Per claim: the most the policy pays for one claim. Here, $2M. A $1M/$2M policy pays only $1M per claim, so it may fall short.
• Aggregate: the most the policy pays for all claims in one policy year. Here, also $2M.
• Network security and privacy: this is the Cyber part. Technology E&O without it may not meet the clause.
• Claims-made: Professional Liability almost always covers claims first made and reported while the policy is active, for work done on or after the retroactive date (the earliest work date the policy covers).

Who asks IT consultants for $2M?

Many IT projects stay at $1M (see $1M Professional Liability for IT consultants). Compared with $1M, $2M doubles the most the policy pays on one claim. It tends to show up when the client is bigger or a failure would hit more of its business:

• Mid-market and enterprise companies using a standard vendor MSA.
• Clients hiring you for ERP, CRM or billing system rollouts, where a bad cutover can stop orders, invoices or payroll.
• Managed services clients that give you admin access to servers and backups.
• Hospitals and health tech firms.

Some enterprise MSAs go higher (see $3M Professional Liability for IT consultants).

How is $2M built?

At $2M, the limit is often one primary policy (the policy that pays first) at $2M/$2M, with Technology E&O and Cyber in one package. In a combined package, the Cyber part may be sublimited or may share the same $2M aggregate. If the clause requires $2M of network security and privacy liability, check that coverage's own limit. Sometimes it is a $1M primary plus a $1M excess layer (a second policy that pays after the first is used up). The excess should follow form, meaning it uses the primary policy's terms.

A commercial umbrella almost never covers Professional Liability. Additional insured status (a named party who gets coverage under your policy) is not automatic on Professional Liability, and many carriers will not add a client. Where one does, it is usually limited to the client's liability from your services. If your contract requires it, confirm early. Many clients only ask for a certificate of insurance (a one-page proof of coverage), which usually gives the holder no rights under the policy.

If you carry $1M today, request new quotes for a $2M policy through Morrow. Morrow can ask carriers to keep your retroactive date and prior acts coverage (coverage for work you did before the new policy started) where the market allows.

What will underwriters ask for?

An underwriter is the person at the insurer who decides whether to offer coverage and on what terms. At $2M, they often look more closely at:

• Your largest contracts and whether you run client systems or only advise.
• How you handle cutovers: written scopes, testing, backups and client sign-off.
• Whether you promise uptime or response times in service level agreements.
• Remote access tools, multi-factor login, and admin rights to client systems.
• What client data you touch, such as health, payment or personal records.
• Revenue by service, subcontractors, loss runs (a report of past claims), and your retroactive date.

What affects the cost?

• Type of work. Managed services, system rollouts and security work usually cost more to insure than one-time advice.
• Access and data. Admin access to systems holding sensitive records can raise the price.
• Limit structure. One primary policy and a primary plus excess layer can price differently.
• Retention and claims history. The retention (what you pay on each claim before the policy pays) and past claims both affect price.

Frequently asked questions

Do I need $2M Professional Liability as an IT consultant?

Only if your contract or client asks for it. Many IT projects stay at $1M.

What could a $2M claim against an IT consultant look like?

It could start with a failed system cutover. In this hypothetical, an ERP go-live you led has bad inventory data, and a distributor ships wrong orders for weeks. A policy may pay defense costs on a covered claim, subject to the limit, the retention and the policy wording.

Is $1M/$2M enough if my contract says $2M?

Only if the clause asks for $1M per claim and $2M aggregate. If it asks for $2M per claim, you likely need a $2M/$2M policy or a primary plus follow-form excess. Confirm with the client that the excess option meets the clause.

Does the $2M need to include Cyber?

Usually yes, if the clause names network security, privacy or data breach. Technology E&O responds to mistakes in your work. Cyber responds to breaches and privacy events. See Professional Liability vs. Cyber.

This article is general information, not legal advice or a coverage determination. Coverage depends on the actual policy wording, carrier underwriting and your contract terms.