Professional indemnity insurance for letting agents: what it covers, and whether it covers a data breach

In England, a letting agent’s professional indemnity cover is usually driven by client money protection scheme rules rather than a stand-alone licensing regime. Scotland, Wales and Northern Ireland differ enough that a UK answer has to separate them.

What does professional indemnity insurance cover?

Professional indemnity insurance covers the legal costs, defence costs and compensation arising when a client says your professional advice, service or duty caused them financial loss. For letting agents, that is the professional indemnity meaning that matters: negligence in management, wrong advice to a landlord, breach of professional duty, inaccurate particulars, missed inspections, mishandled tenant or landlord information, or other service failures. Propertymark’s plain description is that “Professional indemnity insurance, often referred to as PI insurance, covers your company for legal costs and expenses arising from claims of negligence or breach of professional duty.” In Scotland, letting-agent cover has to be broad: the statutory Code says “Cover must be on a full civil liability basis and if feasible, this insurance should be fully retroactive.” PI is not a warranty that the agent’s work was correct; it is a liability policy for claims made against the business.

Who needs professional indemnity insurance?

Professional indemnity insurance is not a general UK legal requirement, but Scotland is the exception: a Scottish letting agent must hold adequate PI directly under the statutory Letting Agent Code, while England requires PI indirectly through client money protection scheme rules, Wales usually imposes it as an agent licence condition, and Northern Ireland has no equivalent general letting-agent PI duty. In England, an agent holding client money must join a CMP scheme because “A property agent who holds client money must be a member of an approved or designated client money protection scheme.” Approved English CMP schemes must require members to “hold and maintain professional indemnity insurance cover that is appropriate for the member's size, income, type of work and the amount of client money held.” In Scotland, the Code says “You must have, and maintain, adequate professional indemnity insurance that is appropriate for your agency's level of income and type of work.” In Northern Ireland, letting agents do not have to join CMP.

Does the agency's policy cover staff personally, or do they need their own?

A letting agency’s PI policy normally responds to claims against the agency arising from staff acts done in the business, but whether staff are personally insured in their own right depends on the policy wording. That distinction matters if a landlord sues over advice from a named property manager rather than suing only the firm. A property-specific Hiscox estate and letting agents summary refers to claims connected with the “dishonesty of your partners, directors, employees, sub-contractors and outsourcers,” which shows the agency policy can cover liabilities created by staff conduct under the firm’s cover. That is not the same as proving each employee has an individual personal policy. Some regulated professions write this expressly: the SRA’s solicitors’ minimum terms say the insured must include categories beyond the firm, but no equivalent statutory letting-agent PI wording fixes that result across the UK. Staff who give advice outside their employment need separate advice.

Does professional indemnity insurance cover a cyber attack or data breach?

Professional indemnity insurance usually does not cover a cyber attack or data breach unless the PI wording includes a cyber or data-breach extension; many firms need separate cyber liability cover for hacking, malware, system failure, incident response and first-party losses. Apex describes the market position bluntly: “UK PI policies historically excluded cyber-related losses through a broad cyber exclusion (see cyber exclusion PI explained) that took out malware, hacking, system failure, and data breach exposures.” The sharper distinction is between a professional-liability claim caused by staff negligence and a cyber-security event caused by hostile access to systems. Solicitors are a special regulated example: the Law Society says SRA minimum terms cover third-party claims from a cyber incident but not the firm’s own losses. Letting agents should not assume that professional liability cover includes data breach costs, ICO response, forensics, ransom, restoration, notification or business interruption unless the schedule says so.

Can a staff member's misdirected email be a professional indemnity claim?

A staff member’s misdirected email can be a professional indemnity claim if it is an unintentional breach of confidentiality or professional negligence causing a landlord, tenant or other client to claim financial loss. This is different from hacking: the cause is staff negligence, not an external cyber attack. The ICO treats this as a recognised incident type, defining it as “Data emailed to incorrect recipient – where an email containing personal data is sent to the wrong email address.” AXA describes PI cover as including “Cover relating to a mistake or unintentional breach of confidentiality.” Apex gives the same kind of example for PI cyber-extension wording: “Third-party liability for breach of personal data held by the firm in the course of professional work — for example, a solicitor's case file containing client personal data being inadvertently emailed to the wrong party.” The agency should notify its insurer immediately and avoid admitting liability before insurers respond.

Is professional indemnity insurance the same as public liability?

Professional indemnity insurance is not the same as public liability insurance: PI covers financial-loss claims from professional advice or services, while public liability covers accidental injury or physical property damage to third parties. AXA states the distinction directly: “The main difference between professional indemnity and public liability insurance is the type of claim they cover.” For a letting agent, PI is the policy most likely to matter if a landlord alleges negligent advice, a missed inspection, a bad reference, a breach of confidentiality or a service failure. Public liability is the policy most likely to matter if a visitor trips in the office or the agency’s activities damage someone else’s property. AXA’s comparison is clear: “Professional indemnity insurance covers claims for financial loss caused by your advice, services, designs or professional recommendations,” while “Public liability insurance covers claims for accidental injury or property damage to third parties.”

Can you buy professional indemnity and public liability on one policy?

You can buy professional indemnity and public liability together as a combined business insurance package, but the two sections still cover different risks and have different limits, exclusions and triggers. Simply Business says, “You can buy professional indemnity insurance and public liability insurance in a single business insurance policy from Simply Business, and add other business insurance covers too.” Combined public liability and professional indemnity insurance is therefore a packaging choice, not a merger of the covers. A landlord’s claim that a letting agent gave negligent advice should be tested under the PI section; a member of the public’s injury claim should be tested under the public liability section. The practical risk with combined policies is assuming one headline premium or one policy document means every professional, cyber, injury and property-damage exposure is covered on the same basis. The schedule and endorsements decide the answer.

Is professional indemnity the same as directors and officers cover?

Professional indemnity is not the same as directors and officers cover: PI protects the business against claims arising from professional services, while D&O protects directors and officers against claims about management decisions and duties in running the company. Companies Act 2006 gives D&O insurance its own footing by saying the company may purchase insurance for a director against liabilities that would otherwise fall within the director-indemnity restriction: “Section 232(2) (voidness of provisions for indemnifying directors) does not prevent a company from purchasing and maintaining for a director of the company, or of an associated company, insurance against any such liability as is mentioned in that subsection.” Marsh Commercial puts the market distinction more sharply: “D&O claims are NOT covered under any other liability policies such as a Professional Indemnity policy.” Directors may need D&O as well as PI if they face personal management-liability exposure.

What are the most common professional indemnity claims against letting agents?

The most common professional indemnity claims against letting agents are negligent property management, missed inspections, data or privacy mistakes caused by staff negligence, valuation or marketing errors, and negligent misstatement in particulars or advice. Propertymark’s letting and sales agent examples include a management failure where an agent misses a plumbing issue and tenants claim for damaged belongings and inconvenience: “If a property management company fails to inspect a building sufficiently, and, for example, misses a plumbing issue that eventually causes severe water damage to several apartments, the affected tenants may file a negligence claim against the company seeking compensation for their damaged belongings and inconvenience.” Data breach should be read here as the misdirected-email or confidentiality-failure kind, not hacking. Other examples include underselling, where “The client may file a claim against the agent for financial losses incurred due to the underselling,” and negligent misstatement after inaccurate information is supplied.

How much professional indemnity cover do you need?

A letting agent needs enough professional indemnity cover to match the size of its instructions, client money held, fee income, portfolio values, contractual promises, regulator or scheme rules, and the worst credible landlord claim, not just the cheapest quoted minimum. England’s CMP approval rules use that logic rather than a fixed statutory amount, requiring cover “appropriate for the member's size, income, type of work and the amount of client money held.” Propertymark sets a concrete membership floor for smaller firms: “For organisations with a total annual fee income up to and including £150,000, the limit of indemnity of the PI Insurance policy must be a minimum of £150,000.” That figure is a trade-body minimum, not a safe maximum. If the agency manages a high-value block, a large rent roll, client-account balances or institutional landlords, the practical answer is usually driven by the largest single loss a landlord could plausibly allege.

What is the limit of indemnity on a professional indemnity policy?

The limit of indemnity on a professional indemnity policy is the maximum amount the insurer will pay under that policy, subject to whether defence costs sit inside or outside the limit and whether the wording is each-and-every-claim or aggregate. Apex defines it simply: “The "limit of indemnity" on a Professional Indemnity policy is the most the insurer will pay out under the policy.” In professional indemnity value questions, the number on the schedule is only the starting point. A £1 million limit may mean £1 million for each covered claim, or £1 million shared across all claims in the policy year; it may include or exclude defence costs; and it may be reduced by excess, exclusions, sub-limits or uninsured heads of loss. Letting agents should check the schedule, not just the certificate, because lenders, landlords and schemes often ask for a specific form of limit.

Does the limit apply to each claim or to the whole policy year?

A professional indemnity limit applies either to each claim or to the whole policy year depending on the wording: each-and-every-claim cover resets for separate claims, while an aggregate limit is one shared pot for all covered claims in the insurance year. Propertymark’s member rules use the stronger structure, requiring a “limit of cover on an 'any one claim' basis.” Solicitors’ compulsory minimum terms in England and Wales go further and restrict aggregate caps: “The insurance must not limit liability to any monetary amount (whether by way of an aggregate limit or otherwise) except as contemplated by clauses 2.1 to 2.3 (inclusive).” Letting agents do not automatically get that solicitor-style protection. If a renewal asks about the highest-value portfolio managed, the insurer is testing the maximum plausible single claim, but the schedule still decides whether the limit applies per claim or in aggregate across the policy year.

What is an excess layer on a professional indemnity policy?

An excess layer on a professional indemnity policy is top-up insurance that sits above the primary PI policy and pays only after the underlying indemnity limit has been exhausted. PolicyBee explains the structure as follows: “Excess layer insurance (sometimes called ‘top up insurance’) is where an insurer agrees to split your liability with other insurers, reducing the risk each insurer takes on.” It is not the same as the ordinary excess or deductible that the insured pays towards a claim; PolicyBee warns, “Well, it’s not to be confused with the insurance excess on your policy.” The Law Society’s explanation captures the trigger: “This is because the cover only applies when the indemnity limit of the primary policy has been breached.” A letting agent might use an excess layer to increase £1 million of primary cover to £2 million, £5 million or more without replacing the base policy.

Is professional indemnity cover triggered when the mistake happened or when the claim is made?

Professional indemnity cover is normally triggered when the claim is made against the insured during the policy period, not when the underlying mistake happened. ICAEW states the market rule directly: “Professional indemnity insurance is a ‘claims made’ policy and provides coverage for claims made during the policy period, regardless of when the incident occurred.” The SRA’s guidance for solicitors says the same thing in regulatory language: “In other words, the cover relates to the period when the claim is made, not when the work that led to the claim was performed.” For letting agents, that makes retroactive dates, run-off cover and prompt notification crucial. A claim made in 2026 about a valuation, reference, inspection or email mistake in 2023 is usually a 2026 policy issue, unless the retroactive date, continuity wording, prior-knowledge exclusion or late-notification clause blocks it.

How much does professional indemnity insurance cost?

Professional indemnity insurance cost for letting agents cannot be read from generic headline prices: GoCompare’s £90 a year is an all-profession median, while Simply Business’s £86.42 figure is only the cheapest 10% of estate agents buying up to £1 million of PI cover in the first half of 2026. GoCompare says, “According to our data, the median cost of professional indemnity insurance is £90 a year.” Simply Business says, “The price is for up to £1 million of professional indemnity insurance – 10% of estate agents paid £86.42 or less annually between 1st Jan – 30th Jun 2026.” Neither figure is a typical letting-agent premium. A professional indemnity insurance quote will turn on turnover, fee income, property type, claims history, client money, largest instruction, cover limit, excess, cyber extensions, retroactive cover and whether the agent wants PI alone or a combined package.

How do you make a professional indemnity claim?

To make a professional indemnity claim, notify the insurer or broker as soon as a claim, threat, complaint, demand, allegation or circumstance arises, follow the policy’s claims-condition wording, and do not admit liability or settle before insurers confirm their position. The insurance conduct rules require insurers to “provide reasonable guidance to help a policyholder make a claim and appropriate information on its progress,” but the policyholder still has to report the matter promptly and preserve documents. Limitation periods matter for the claimant: in England and Wales, “An action founded on tort shall not be brought after the expiration of six years from the date on which the cause of action accrued.” Northern Ireland uses the same six-year tort period. Scotland is shorter for many professional-negligence liabilities: “If, after the appropriate date, an obligation to which this section applies has subsisted for a continuous period of five years—” it can be extinguished by prescription.

Last reviewed September 2026.

Sources

• Client Money Protection Schemes for Property Agents (Requirement to Belong to a Scheme etc.) Regulations 2019, regulation 3(1) — “A property agent who holds client money must be a member of an approved or designated client money protection scheme.” Source
• Client Money Protection Schemes for Property Agents (Approval and Designation of Schemes) Regulations 2018, regulation 5(2)(g) — “hold and maintain professional indemnity insurance cover that is appropriate for the member's size, income, type of work and the amount of client money held.” Source
• Letting Agent Code of Practice, paragraph 130 — “You must have, and maintain, adequate professional indemnity insurance that is appropriate for your agency's level of income and type of work unless you can demonstrate equivalent or greater protection through another body or membership organisation.” Source
• Letting Agent Code of Practice, paragraph 131 — “Cover must be on a full civil liability basis and if feasible, this insurance should be fully retroactive.” Source
• HMRC Economic Crime Supervision Handbook, ECSH55025 — “Letting agents in Northern Ireland do not have to join a Client Money Protection scheme.” Source
• Propertymark professional standards rules — “Professional indemnity insurance, often referred to as PI insurance, covers your company for legal costs and expenses arising from claims of negligence or breach of professional duty.” Source
• Hiscox, Professional Indemnity Insurance for Estate and Letting Agents policy summary — “dishonesty of your partners, directors, employees, sub-contractors and outsourcers.” Source
• Apex Insurance Brokers, PI cyber extension guide — “UK PI policies historically excluded cyber-related losses through a broad cyber exclusion (see cyber exclusion PI explained) that took out malware, hacking, system failure, and data breach exposures.” Source
• Law Society Communities, cyber risks and PII premium — “We have also seen more firms looking to supplement their PII with standalone cyber cover – especially following the clarification by the Solicitors Regulation Authority (SRA) in 2021 that, while its minimum terms and conditions of PII for solicitors registered in England and Wales will cover third-party claims arising from a cyber incident, it does not cover any of a firm's own losses.” Source
• ICO, data-security incident types glossary — “Data emailed to incorrect recipient – where an email containing personal data is sent to the wrong email address.” Source
• AXA UK, professional indemnity insurance — “Cover relating to a mistake or unintentional breach of confidentiality.” Source
• Apex Insurance Brokers, PI cyber extension guide — “Third-party liability for breach of personal data held by the firm in the course of professional work — for example, a solicitor's case file containing client personal data being inadvertently emailed to the wrong party.” Source
• AXA UK, professional indemnity insurance — “The main difference between professional indemnity and public liability insurance is the type of claim they cover.” Source
• AXA UK, professional indemnity insurance — “Professional indemnity insurance covers claims for financial loss caused by your advice, services, designs or professional recommendations.” Source
• AXA UK, professional indemnity insurance — “Public liability insurance covers claims for accidental injury or property damage to third parties, such as customers or members of the public, arising from your business activities.” Source
• Simply Business, professional indemnity insurance — “You can buy professional indemnity insurance and public liability insurance in a single business insurance policy from Simply Business, and add other business insurance covers too.” Source
• Companies Act 2006, section 233 — “Section 232(2) (voidness of provisions for indemnifying directors) does not prevent a company from purchasing and maintaining for a director of the company, or of an associated company, insurance against any such liability as is mentioned in that subsection.” Source
• Marsh Commercial, management liability insurance guide — “D&O claims are NOT covered under any other liability policies such as a Professional Indemnity policy.” Source
• Propertymark, common causes of PI claims — “If a property management company fails to inspect a building sufficiently, and, for example, misses a plumbing issue that eventually causes severe water damage to several apartments, the affected tenants may file a negligence claim against the company seeking compensation for their damaged belongings and inconvenience.” Source
• Propertymark, common causes of PI claims — “The client may file a claim against the agent for financial losses incurred due to the underselling.” Source
• Propertymark Conduct and Membership Rules — “For organisations with a total annual fee income up to and including £150,000, the limit of indemnity of the PI Insurance policy must be a minimum of £150,000.” Source
• Apex Insurance Brokers, aggregate versus each-and-every-claim limit — “The "limit of indemnity" on a Professional Indemnity policy is the most the insurer will pay out under the policy.” Source
• Propertymark professional standards rules, PI insurance — “limit of cover on an 'any one claim' basis” Source
• SRA Minimum Terms and Conditions of Professional Indemnity Insurance — “The insurance must not limit liability to any monetary amount (whether by way of an aggregate limit or otherwise) except as contemplated by clauses 2.1 to 2.3 (inclusive).” Source
• PolicyBee, excess layer insurance explained — “Excess layer insurance (sometimes called ‘top up insurance’) is where an insurer agrees to split your liability with other insurers, reducing the risk each insurer takes on.” Source
• PolicyBee, excess layer insurance explained — “Well, it’s not to be confused with the insurance excess on your policy.” Source
• Law Society, top-up cover and excess layer insurance — “This is because the cover only applies when the indemnity limit of the primary policy has been breached.” Source
• ICAEW, importance of run-off cover — “Professional indemnity insurance is a ‘claims made’ policy and provides coverage for claims made during the policy period, regardless of when the incident occurred.” Source
• SRA, adequate and appropriate indemnity insurance guidance — “In other words, the cover relates to the period when the claim is made, not when the work that led to the claim was performed.” Source
• GoCompare, professional indemnity insurance — “According to our data, the median cost of professional indemnity insurance is £90 a year.” Source
• Simply Business, real estate agents insurance — “The price is for up to £1 million of professional indemnity insurance – 10% of estate agents paid £86.42 or less annually between 1st Jan – 30th Jun 2026.” Source
• FCA Handbook, ICOBS 8.1.1(2) — “provide reasonable guidance to help a policyholder make a claim and appropriate information on its progress;” Source
• Limitation Act 1980, section 2 — “An action founded on tort shall not be brought after the expiration of six years from the date on which the cause of action accrued.” Source
• Limitation (Northern Ireland) Order 1989, article 6(1) — “Subject to paragraph (2) and to Articles 7 and 9 and 11 to 13, an action founded on tort may not be brought after the expiration of six years from the date on which the cause of action accrued.” Source
• Prescription and Limitation (Scotland) Act 1973, section 6(1) — “If, after the appropriate date, an obligation to which this section applies has subsisted for a continuous period of five years—” Source