AI, Data and New‑Age Risks: Preparing Directors and Officers (D&O) Liability Insurance for Emerging Tech Exposures

Directors and officers (D&O) face a rapidly evolving risk landscape in the United States. Rapid adoption of AI, expanded use of data, and new tech-related regulatory and litigation pressures are changing how underwriters assess D&O exposures and how boards should structure insurance programs. This article explains emerging exposures, how D&O coverage is responding, practical underwriting changes, and concrete steps U.S. boards (especially in New York, California and Delaware‑headquartered companies) should take now.

Why AI and data risks matter to D&O insurers (and boards)

  • Regulatory scrutiny is rising. Federal and state regulators (FTC, SEC, California AG, and state consumer protection offices) are increasingly focused on algorithmic harms, privacy, and model governance. Failures in oversight or disclosure can trigger securities suits and derivative claims against directors and officers.
  • Securities litigation drivers. Technology-related disclosures (AI capabilities, data monetization, breach disclosures) are prime targets for investor suits when outcomes diverge from guidance or perceived investor expectations.
  • Complex causation. Model failures, biased outputs, or data breaches create multi-front claims (securities suits, regulatory enforcement, consumer class actions), often implicating board oversight decisions — the core of D&O exposure.

Cornerstone Research and other litigation trackers have documented an uptick in tech- and data‑driven securities cases in recent years, underscoring the connection between operational data/AI failures and D&O claims (see sources below).

Sources: Marsh market commentary; Cornerstone Research litigation reviews; Deloitte analysis of AI governance and risk.

How D&O underwriting is changing (U.S. market specifics)

Underwriters are modifying appetite, pricing and terms—particularly for companies with material AI or data‑driven business models. Key shifts seen across the U.S. market (notably in New York and California insurer hubs):

  • More granular risk assessment. Underwriters now require:
    • Inventory of AI systems and third‑party models
    • Data provenance and vendor management protocols
    • Board-level AI/data governance and AI-related minutes
  • Higher pricing for tech exposures. Brokers report premium increases ranging broadly from ~20% to 50% (varies by sector and prior claims history) for public technology firms with material AI/data operations versus prior renewal cycles. Smaller private tech firms often see sharper rate volatility due to lack of historical loss data. (Market reports cited below.)
  • Stronger exclusions & carve‑outs. Policies increasingly clarify exclusions around intentional wrongdoing, criminal acts, and sometimes cyber‑event derivative exposures — underwriters may insist on cyber and AI operational liability towers to sit alongside D&O.
  • Capacity reallocation. Some carriers (e.g., legacy market leaders such as AIG, Chubb, Beazley and new specialty underwriters) are repositioning capacity by sector — preferential pricing for well‑governed AI adopters, restricted appetite for high‑risk model deployments.

Typical pricing illustrations (U.S. market context)

The following ranges are market-observed illustrative figures for D&O annual premiums in the U.S. (2023–2024 renewal environment). Individual pricing depends on revenue, public vs private status, claims history, governance and industry.

Company / Profile Annual D&O Primary Premium (U.S., typical range) Notes
Small private tech startup (<$50M revenue) $15,000 – $75,000 Wide spread due to underwriting risk appetite and product exposure
Mid‑market private/late‑stage tech ($50M–$500M) $75,000 – $400,000 Higher where AI/data are material to product
Mid‑cap public tech ($500M–$3B) $300,000 – $1,500,000 Pricing sensitive to guidance volatility and disclosure practices
Large-cap public tech (>$3B) $1,000,000 – $5,000,000+ Layered programs and high retentions common

Sources: market broker summaries and insurer commentary (Marsh, Aon market briefs). These ranges are realistic market benchmarks; individual insurer bids (AIG, Chubb, Beazley, Travelers) will vary by underwriting appetite in New York and California markets.

External resources:

Specific new‑age exposures that drive D&O claims

  • Failure to disclose material AI risks or limitations in earnings calls and SEC filings
  • Model bias or discriminatory outcomes leading to regulatory action and class suits
  • Third‑party model/vendor failures (supply chain/model risk)
  • Data monetization misstatements and privacy‑related enforcement
  • Post‑incident disclosure missteps after an AI failure or data incident

Boards in Delaware, New York and California are particularly exposed: many public tech companies are incorporated in Delaware, headquartered in New York or California, and those state regulators/municipal plaintiffs are active in bringing claims.

Practical steps boards and risk managers should take

  1. Integrate AI & data oversight into the ERM and D&O renewal calendar
    • Provide underwriters with board minutes that document AI governance (model inventory, validation, risk appetite).
  2. Conduct scenario-based disclosure stress tests
    • Model likely stock, regulatory and litigation outcomes from plausible AI failures and include those scenarios in insurance limit planning.
  3. Buy layered protection: D&O + cyber/AI operational liability
    • For material model deployments, consider adding technology/errors‑and‑omissions or affirmative AI liability coverage to backstop D&O gaps.
  4. Negotiate policy wording proactively
    • Seek clear definitions of “wrongful acts” as they relate to AI oversight and ensure exclusions are narrow and specific.
  5. Align retentions with appetite and balance sheet
    • For companies headquartered in New York or California, consider higher primary limits and lower retentions for securities exposure, given active plaintiff environments.
  6. Work with specialized brokers
    • Use brokers experienced in tech/AI D&O placements (Marsh, Aon, Willis Towers Watson) to access market capacity and negotiate AI‑specific endorsements.

Case examples and carrier responses

  • Large public tech companies that disclose extensive AI programs have seen multiple carrier engagement rounds and higher layered program costs—renewals often include additional information requests on model validation and vendor contracts.
  • Specialty underwriters (e.g., Beazley, Chubb) have introduced products and endorsements addressing model governance and algorithmic liability in tandem with cyber offerings. Legacy carriers such as AIG and Travelers remain active on broad D&O towers but have tightened scrutiny on model risk.

How to size limits for future tech litigation scenarios

  • Map scenarios to market capitalization and likely securities exposure. Example rule‑of‑thumb (U.S. board planning):
    • Emerging AI risk with moderate investor reliance → consider increasing D&O total limits by 25–50%
    • AI core to business and high publicity potential → add dedicated excess D&O or sidecars; target limits of $50M–$100M for mid-to-large caps
  • Budgeting: expect D&O program spend to rise materially with higher limits and specialized endorsements; use broker scenarios to project multi‑year premium impacts.

Checklist for D&O renewals (AI & data focus)

  • Provide underwriters:
    • Current AI/data inventory and vendor map
    • Minutes showing board oversight and AI governance committee existence
    • Incident response and disclosure playbook
    • Recent independent model validation or auditing reports
  • Evaluate gaps:
    • Do you need a standalone AI liability/policy?
    • Is cyber insurance aligned with D&O sublimits and notice requirements?
    • Are policy exclusions newly introduced that require negotiation?

Further reading (internal resources)

Conclusion — Board priorities for the next 12–24 months

Boards and senior executives in the U.S. (particularly New York, California and Delaware‑incorporated firms) must treat AI and data exposures as core D&O risks. That means upgrading governance, stress‑testing disclosures, aligning cyber and D&O towers, and working with experienced brokers/insurers to secure adequate limits and favorable terms. Given observed market pricing adjustments and evolving underwriting behavior, proactive engagement before renewal deadlines will materially improve placement outcomes and limit loss shock to balance sheets.

External sources and further market commentary:

Recommended Articles