
The war exclusion clause can have significant implications for Lloyd's membership and reinsurance. Lloyd's syndicates are required to include a war exclusion clause in their policies, which can limit their liability in the event of a war-related claim.
This exclusion clause can lead to disputes between Lloyd's syndicates and policyholders. Lloyd's syndicates may argue that the war exclusion clause applies, while policyholders may claim that the clause is invalid or does not apply to their specific situation.
The war exclusion clause can also impact reinsurance arrangements. Reinsurers may be reluctant to provide coverage for policies that include a war exclusion clause, as they may be concerned about the potential for large claims.
Lloyd's Membership and Reinsurance
Lloyd's members are using the LMA5667A war exclusion, which excludes losses arising out of war and cyber operations that are part of war. This exclusion is widely used and meets Lloyd's guidelines.
For Lloyd's insurers, using non-compliant war exclusions is not an option. However, many non-Lloyd's insurers are happy to continue using those exclusions, making a consensus on a single war exclusion unlikely in the near future.
Reinsurance plays a significant role in the direct cyber insurance market, with a significant proportion of policies being reinsured. If reinsurers provide terms that include a Lloyd's-compliant war exclusion, it could help bring about a greater consensus on the issue.
Why Have Lloyd's Introduced Changes?
Lloyd's has introduced changes due to their concern that traditional war exclusions in cyber insurance policies don't adequately address systemic loss risk associated with cyber threats.
A single cyber-attack with widespread impact could affect the insurance market's ability to pay covered losses, according to Lloyd's.
Lloyd's Membership and How It Works
Lloyd's membership is a significant aspect of the Lloyd's market, and understanding how it works is crucial for those involved in reinsurance.
Lloyd's members use the LMA5667A war exclusion, which is the most widely used war exclusion that meets Lloyd's guidelines.
This exclusion specifically excludes losses arising out of war and cyber operations that are part of war, addressing systemic loss concerns expressed by Lloyd's.
The exclusion does not automatically apply to cyber operations deployed by nation states outside of war, and the specific exclusion depends on the facts of each case.
Only losses arising from affected computer systems located in countries that meet the criteria for an "Impacted State" are excluded under the LMA5667A war exclusion.
Reinsurance
Reinsurance is a crucial aspect of the insurance industry, and Lloyd's insurers have specific guidelines to follow.
Many direct cyber insurance policies are reinsured, which means that reinsurers provide additional coverage to the original policy.
Reinsurers often provide terms that offer back-to-back cover of the war exclusion in the direct cyber insurance policy, creating a seamless coverage experience.
However, Lloyd's insurers are unable to use non-compliant war exclusions, which could lead to a gap in coverage if reinsurers don't adapt.
This has created a challenge in reaching a consensus on a single war exclusion that all insurers can support.
If reinsurers provide terms that are subject to a Lloyd's-compliant war exclusion, it could lead to a greater consensus on the issue, making it more likely that insurers will agree on a universal war exclusion.
Traditional vs Lloyd's Clauses
The approach to war exclusions in cyber insurance is not a straightforward one, and it's often an over-simplification to suggest one approach is better than another.
The 'traditional' war exclusions approach war and nation state cyber activity differently than Lloyd's model war clauses. As such, it can be a matter of personal preference for policyholders.
In many cases, buyers of cyber insurance have a strong view on the matter, and it may come down to whether they prefer the 'traditional' approach or Lloyd's model war clauses.
War Exclusion Clause Controversy
The war exclusion clause controversy is a complex issue that has left many buyers of cyber insurance questioning its clarity and scope. Some argue that the absence of clear language in war exclusions could be used to the policyholder's advantage in the event of a coverage dispute.
The Merck v. Ace American Insurance Company et al. case, which involved a cyber operation attributed to the Russian military, highlights the uncertainty surrounding the application of war exclusions to cyberattacks. The court's decision avoided the questions of attribution and characterization, instead invoking a technical principle of contract law that ambiguities in an exclusion should be resolved against the insurer.
The war exclusion clause has been traditionally used to exclude losses caused by "war" or "warlike" actions, but its application to cyber operations is still unclear. The court's reasoning in the Merck case is questionable, as it ignored the fact that the NotPetya operation took place in the context of traditional forms of warfare in Eastern Ukraine.
Attribution and Characterization
Attribution and characterization are key questions in determining whether a cyber operation is covered under a war exclusion clause. Governments are best positioned to identify perpetrators, but they may not do so publicly.
Identifying the perpetrator of a cyber operation is challenging, costly, and inexact. The relationship between the perpetrator and the relevant state must be determined, which presents another challenging factual issue.
A government's assessment of attribution may be influenced by diplomacy, politics, and even insurance implications. Different governments may take opposing positions on the attribution of a cyber operation.
The traditional factors used to determine whether a state-sponsored cyber operation is "warlike" are ill-suited to the context of cyber operations. These factors include the proximity of a cyber operation to a "theater of war" and the presence of uniformed, weapon-carrying combatants.
A cyber operation can serve a state's military or diplomatic goals without physical force, for example, through espionage or data theft.
Controversy
The war exclusion clause has been a topic of controversy in the insurance world. Some buyers of cyber insurance have questioned whether the clarity provided by LMA5567A comes at the expense of cover.
The absence of clarity in war exclusions in cyber insurance policies could be used to the policyholder's advantage in the event of a coverage dispute. This lack of clarity has led to disputes over the application of the war exclusion clause.
Merck v. Ace American Insurance et al. does not provide clear answers on the application of the war exclusion clause. The court avoided questions of attribution and characterization by stacking the deck against the insurers.
The court's decision is questionable, as the New Jersey Supreme Court has held that the principle of contra proferentum does not apply to sophisticated commercial insureds like Merck.
Misconceptions
The War Exclusion Clause Controversy has led to some misconceptions about the scope of cover.
One of the most notable misconceptions is that Lloyd's is no longer covering nation-state cyber-attacks, but this is actually inaccurate.
Some people may think that the complexity of the LMA5567A is to blame for these misconceptions, and they'd be right.
Sources
- https://www.huntonak.com/hunton-insurance-recovery-blog/the-war-exclusion-will-be-a-leading-issue-in-the-months-and-years-ahead
- https://www.guycarp.com/insights/2022/11/war-exclusions-in-the-context-of-cyber-operations.html
- https://www.wtwco.com/en-us/insights/2023/06/war-exclusions-in-cyber-policies-the-important-details
- https://insurancenewsnet.com/innarticle/insurance-polices-adding-insurrection-riots-as-exclusions
- https://aidainsurance.org/news/comparative-report-war-exclusions-and-cyber-attacks-2022-07-08
Featured Images: pexels.com