$2M Professional Liability (E&O) Insurance for Records Management Companies

For records management companies, a $2M Professional Liability (E&O) clause usually means $2M for each claim, so a $1M/$2M policy often falls short. This guide is for records companies facing that contract.

What does a $2M requirement mean for records management companies?

Professional Liability (E&O, short for Errors and Omissions) covers claims that a mistake in your services cost a client money. A $2M clause in a records services agreement might read like this (certified destruction means shredding with a signed record of it):

• Per claim: the most the policy pays for one claim.
• Aggregate: the most the policy pays for all claims in one policy year. $2M/$2M means $2M for one claim. $1M/$2M has the right aggregate but only $1M for one claim, so it would not meet this clause.
• Claims-made: Professional Liability almost always covers claims made and reported while the policy is active, for work after the retroactive date (the earliest work date covered).
• Three years after: you would keep the coverage after the contract ends, or buy a tail (extra time to report claims about past work). See tail coverage.

Who asks records management companies for $2M?

Many clients ask for $1M (see $1M for records management companies) and some ask for $3M (see $3M for records management companies). A $2M request often comes from:

• Larger law firms sending active litigation files, not just closed boxes, to your facility.
• Corporate legal departments that rely on you to apply retention schedules and honor legal holds across many sites.
• Courts and state agencies with large backfile scanning or conversion contracts.
• Hospital systems using you for chart storage or release of information (sending patient records to people who request them).
• Banks and insurers that set the same vendor limits under one master services agreement (a single contract that covers many jobs).

How is $2M built?

At $2M, the limit is usually one primary policy (the policy that pays first) written at $2M/$2M. Sometimes a $1M primary plus a $1M excess layer (a second policy that pays after the first is used up) reaches $2M.

The excess should follow form, meaning it uses the same terms as the primary. Confirm with the client that primary plus follow-form excess meets the clause. A commercial umbrella almost never covers Professional Liability, so it usually cannot fill the gap.

Many records companies buy Miscellaneous Professional Liability (a general form for other services). If you host scanned images, run a client portal or process e-discovery data (electronic files used in lawsuits), Technology E&O and Cyber (for data breaches and privacy claims) often fit better.

What will underwriters ask for?

An underwriter is the person at the insurer who decides whether to offer coverage and on what terms. At $2M, records companies are often asked about:

• The contract asking for $2M and the services it lists.
• Revenue by service: storage, retrieval, scanning and indexing, certified destruction, release of information and data hosting, plus quality checks on scanning.
• How you receive, log and apply legal hold notices, and who signs off before any destruction.
• Retrieval turnaround promises in your contracts, and whether you agree to penalties for missing them.
• Subcontractors, prior claims, known incidents, and your current policy with its retroactive date.

What affects the cost?

• Service mix. Legal hold, release of information and data hosting usually cost more to cover than plain box storage.
• Client and record type. Active litigation files, court records and medical charts carry larger possible losses.
• Primary or layered. One $2M primary policy and a $1M primary plus $1M excess layer are priced differently, and each is priced on its own terms.
• Controls and claims history. Written destruction sign-off and hold tracking may help. Prior claims can raise cost.
• Retention and defense terms. A higher retention (the amount you pay on each claim before the policy pays) usually lowers the premium. See cost factors.

Frequently asked questions

Do I need $2M Professional Liability as a records management company?

Only if your contract or client asks for it, and many larger records contracts do. A hypothetical example: an indexing error on a court scanning project leaves thousands of files unfindable, and the agency pays to redo the work. Another: a missed legal hold notice leads to destroyed records and client sanctions. Whether destruction of records falls under Professional Liability or needs a Warehouse or Bailee Legal Liability policy depends on the policy's property damage and care, custody or control wording.

Is $1M/$2M enough if my contract says $2M?

Only if the clause asks for $1M per claim and $2M aggregate. If it asks for $2M per claim, you need $2M/$2M. Request new quotes through Morrow, keeping your retroactive date where possible. Have the new policy start by the contract date, and report known incidents to your current carrier before switching.

Does Professional Liability cover a data breach of my scanned files?

Not fully in many cases. Breach response and privacy claims usually fall under Cyber, so check both policies against your contract.

This article is general information, not legal advice or a coverage determination. Coverage depends on the actual policy wording, carrier underwriting and your contract terms.