✓ Verified Oct 2026 Across All 51 US Jurisdictions (50 States + DC Department of Insurance .gov Schedules) 🏛️ 50-State DOI (.gov) · Ohio ORC § 1354.01 · NYDFS 23 NYCRR 500

State-by-State E&O Minimum Liability Limits & Statutory vs. Contractual Coverage Matrix

⚖️ Statutory Law vs. Commercial MSA Reality: Which States Actually Require E&O Insurance? 50-State + DC Single Authority Table

🏛️ STATUTORY LICENSE MANDATES
No US state mandates general E&O insurance for all B2B corporations. Statutory state law requires E&O only for specific state-licensed professions:
• 12 Mandatory Real Estate E&O States: CO, ID, IA, KY, LA, MS, NE, NM, ND, RI, SD, TN ($100k/$300k to $300k/$500k state group policies).
• Resident Insurance Producers: Oregon (ORS Ch. 744) mandates $300,000 / $600,000 E&O.
• Licensed Attorneys: Oregon ($300k State Bar PLF) and Idaho ($100k/$300k Bar Rule 229).
• Licensed Healthcare Providers: CO, CT, KS, PA, WI statutory medical malpractice minimums.
🛡️ STATE CYBER SAFE HARBORS
For B2B SaaS, IT, and Consulting firms, state risk is governed by Statutory Cybersecurity Tort Safe-Harbor Laws (Ohio ORC § 1354.01, Utah Code § 78B-4-702, Connecticut Gen. Stat. § 36a-701b, Tennessee TIPA—which shield businesses conforming to NIST/CIS/ISO 27001 from punitive tort damages) and strict statutory penalty regimes (California CCPA/CPRA § 1798.150, NYDFS 23 NYCRR 500, Illinois BIPA).
📝 B2B CONTRACTUAL FLOORS
Even where state statute is silent, State CIO IT Procurement Contracts require $1M/$2M to $2M/$4M Tech E&O + $2M–$5M Cyber, and private Enterprise MSAs demand $2M/$2M (SOC 2) to $5M/$5M (HIPAA/Banking) across all 50 states.

Quote 50-State Admitted Tech E&O + Cyber on Embroker → Check State-Specific Hiscox E&O Rate ($45/mo) →

Search State, Statute, or Regulator (.gov):

Filter by Statutory Category:

50-State + DC E&O & Cyber Liability Minimums Matrix (Single Authority Table)

State	Official Regulator (.gov)	Statutory Profession E&O Mandates	Privacy / Breach Statute & Cyber Safe Harbor	State IT Procurement Floor	Commercial MSA Standard (SMB / Enterprise)	NAIC Rate Factor
AL — Alabama	Alabama Dept. of Insurance (ALDOI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Ala. Code § 8-38-1 (Data Breach Notification Act)	`$1M/$2M State Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1x
AK — Alaska	Alaska Division of Insurance (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Alaska Stat. § 45.48.010 (Personal Information Protection Act)	`$1M/$2M State IT Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.02x
AZ — Arizona	Arizona Dept. of Insurance & Financial Institutions (DIFI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Ariz. Rev. Stat. § 18-551 (Data Breach Notification)	`$1M/$2M State SPO Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.98x
AR — Arkansas	Arkansas Insurance Department (AID) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Ark. Code § 4-110-101 (Personal Information Protection Act)	`$1M/$2M State Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.95x
CA — California	California Department of Insurance (CDI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	CCPA / CPRA (Cal. Civ. Code § 1798.100 — $2,500–$7,500/violation + Private Right of Action § 1798.150)	`$2M/$4M DGS Cloud/IT E&O + $5M Cyber Liability`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.28x
CO — Colorado	Colorado Division of Insurance (DORA) (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O (C.R.S. § 12-10-207) + Healthcare Provider Malpractice ($1M/$3M)	Colorado Privacy Act (CPA — C.R.S. § 6-1-1301) & § 6-1-716 (30-Day Breach Notice)	`$1M/$2M State OIT Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.04x
CT — Connecticut	Connecticut Insurance Department (CID) (.gov)	Mandatory Physician/Healthcare Malpractice ($500k/$1.5M); General B2B E&O is contractual	CT Data Privacy Act (CTDPA) & Conn. Gen. Stat. § 36a-701b (Cyber Safe Harbor for NIST/CIS) ✓ Statutory NIST/CIS Tort Safe Harbor	`$1M/$2M DAS IT Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.08x
DE — Delaware	Delaware Department of Insurance (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Delaware Personal Data Privacy Act (DPDPA) & 6 Del. C. § 12B-101	`$1M/$2M DTI Cloud Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.06x
DC — District of Columbia	DC Dept. of Insurance, Securities & Banking (DISB) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	D.C. Code § 28-3851 (Consumer Security Breach Notification Act)	`$2M/$4M OCP District IT E&O + $3M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.18x
FL — Florida	Florida Office of Insurance Regulation (FLOIR) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Florida Digital Bill of Rights (FDBR) & FIPA (Fla. Stat. § 501.171 — 30-Day Notice)	`$1M/$2M DMS State Term Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.12x
GA — Georgia	Georgia Office of Commissioner of Insurance (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Ga. Code § 10-1-910 (Personal Identity Protection Act)	`$1M/$2M GTA Technology Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.03x
HI — Hawaii	Hawaii Insurance Division (DCCA) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Haw. Rev. Stat. § 487N-1 (Security Breach of Personal Information)	`$1M/$2M State ETS Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.01x
ID — Idaho	Idaho Department of Insurance (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O + Idaho State Bar Rule 229 Attorney Malpractice ($100k/$300k)	Idaho Code § 28-51-104 (Identity Theft & Security Breach Notice)	`$1M/$2M State DOP IT E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.92x
IL — Illinois	Illinois Department of Insurance (IDOI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	IL BIPA (740 ILCS 14/ Biometric Privacy) & PIPA (815 ILCS 530/)	`$2M/$4M DoIT Cloud/SaaS E&O + $3M Cyber (incl. BIPA check)`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.22x
IN — Indiana	Indiana Department of Insurance (IDOI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Indiana Consumer Data Protection Act (ICDPA) & Ind. Code § 24-4.9	`$1M/$2M IOT State Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.96x
IA — Iowa	Iowa Insurance Division (IID) (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	Iowa Consumer Data Protection Act (ICDPA — Iowa Code Ch. 715D)	`$1M/$2M DAS IT Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.93x
KS — Kansas	Kansas Insurance Department (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Kan. Stat. § 50-7a01 (Protection of Consumer Information)	`$1M/$2M OITS Contract E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.94x
KY — Kentucky	Kentucky Department of Insurance (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	Kentucky Consumer Data Protection Act (KCDPA) & KRS § 365.732	`$1M/$2M COT State Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.96x
LA — Louisiana	Louisiana Department of Insurance (LDI) (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	La. R.S. § 51:3071 (Database Security Breach Notification Law)	`$1M/$2M OTS IT Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.07x
ME — Maine	Maine Bureau of Insurance (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	10 M.R.S. § 1346 (Notice of Risk to Personal Data Act)	`$1M/$2M MaineIT Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.95x
MD — Maryland	Maryland Insurance Administration (MIA) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Maryland Online Data Privacy Act (MODPA) & Md. Code Com. Law § 14-3501	`$2M/$4M DoIT State Contract E&O + $3M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.09x
MA — Massachusetts	Massachusetts Division of Insurance (DOI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	201 CMR 17.00 (Strict Written Information Security Program WISP Mandate) & M.G.L. c. 93H	`$2M/$4M EOTSS IT Contract E&O + $3M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.15x
MI — Michigan	Michigan Dept. of Insurance & Financial Services (DIFS) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Mich. Comp. Laws § 445.63 (Identity Theft Protection Act)	`$1M/$2M DTMB IT Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.01x
MN — Minnesota	Minnesota Department of Commerce — Insurance (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Minnesota Consumer Data Privacy Act (MCDPA) & Minn. Stat. § 325E.61	`$1M/$2M MNIT Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1x
MS — Mississippi	Mississippi Insurance Department (MID) (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	Miss. Code § 75-24-29 (Notice of Breach of Security)	`$1M/$2M ITS State Contract E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.96x
MO — Missouri	Missouri Dept. of Commerce & Insurance (DCI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Mo. Rev. Stat. § 407.1500 (Personal Information Breach Notice)	`$1M/$2M OA-ITSD Contract E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.97x
MT — Montana	Montana Commissioner of Securities & Insurance (CSI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Montana Consumer Data Privacy Act (MCDPA) & Mont. Code § 30-14-1704	`$1M/$2M SITSD Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.93x
NE — Nebraska	Nebraska Department of Insurance (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	Nebraska Data Privacy Act (NDPA) & Neb. Rev. Stat. § 87-801	`$1M/$2M OCIO Contract E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.93x
NV — Nevada	Nevada Division of Insurance (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	NRS 603A (Security and Privacy of Personal Information & Encryption Mandate)	`$1M/$2M State EITS Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.03x
NH — New Hampshire	New Hampshire Insurance Department (NHID) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	New Hampshire Data Privacy Act (NHDPA) & RSA 359-C:19	`$1M/$2M DoIT State Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.96x
NJ — New Jersey	New Jersey Dept. of Banking & Insurance (DOBI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	New Jersey Data Privacy Act (NJDPA) & N.J.S.A. 56:8-161	`$2M/$4M NJ OIT Contract E&O + $3M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.16x
NM — New Mexico	New Mexico Office of Superintendent of Insurance (OSI) (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	N.M. Stat. § 57-12C-1 (Data Breach Notification Act)	`$1M/$2M DoIT Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.97x
NY — New York	New York State Department of Financial Services (NYDFS) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	NY SHIELD Act (GBL § 899-aa/bb) & NYDFS 23 NYCRR Part 500 Cybersecurity Regulation	`$2M/$4M NYS OGS IT Umbrella E&O + $5M Cyber Liability`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.3x
NC — North Carolina	North Carolina Department of Insurance (NCDOI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	N.C. Gen. Stat. § 75-65 (Identity Theft Protection Act)	`$1M/$2M NCDIT Cloud/SaaS Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.98x
ND — North Dakota	North Dakota Insurance Department (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	N.D. Cent. Code § 51-30-01 (Notice of Security Breach)	`$1M/$2M NDIT State Contract E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.91x
OH — Ohio	Ohio Department of Insurance (ODI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Ohio Data Protection Act (ORC § 1354.01 Affirmative Tort Safe Harbor for NIST/CIS/ISO 27001) ✓ Statutory NIST/CIS Tort Safe Harbor	`$1M/$2M DAS OIT Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.97x
OK — Oklahoma	Oklahoma Insurance Department (OID) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	24 O.S. § 161 (Security Breach Notification Act)	`$1M/$2M OMES IS Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.95x
OR — Oregon	Oregon Division of Financial Regulation (DFR) (.gov)	Mandatory Attorney PLF ($300k/$300k) + Resident Insurance Producers (ORS Ch. 744: $300k/$600k E&O)	Oregon Consumer Privacy Act (OCPA) & ORS § 646A.600	`$1M/$2M EIS State IT Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.02x
PA — Pennsylvania	Pennsylvania Insurance Department (PID) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	73 P.S. § 2301 (Breach of Personal Information Notification Act — Updated 2024/2026)	`$1M/$2M PA DGS IT Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.06x
RI — Rhode Island	Rhode Island Department of Business Regulation — Insurance (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	Rhode Island Data Transparency & Privacy Protection Act & R.I. Gen. Laws § 11-49.3-1	`$1M/$2M DoIT State Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.02x
SC — South Carolina	South Carolina Department of Insurance (SCDOI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	S.C. Code § 39-1-90 & SC Insurance Data Security Act (NAIC Model Law)	`$1M/$2M SFAA OTIS IT E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.98x
SD — South Dakota	South Dakota Division of Insurance (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	S.D. Codified Laws § 22-40-19 (Breach of System Security)	`$1M/$2M BIT State Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.91x
TN — Tennessee	Tennessee Dept. of Commerce & Insurance (TDCI) (.gov)	Mandatory Real Estate E&O Mandatory Real Estate Licensee E&O ($100k/$300k–$500k group policy); General B2B E&O is contractual	Tennessee Information Protection Act (TIPA — NIST Privacy Framework Safe Harbor) ✓ Statutory NIST/CIS Tort Safe Harbor	`$1M/$2M STS State IT Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.98x
TX — Texas	Texas Department of Insurance (TDI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Texas Data Privacy & Security Act (TDPSA) & Tex. Bus. & Com. Code § 521.053 (30-Day AG Notice)	`$2M/$4M Texas DIR Cooperative Contract E&O + $3M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.08x
UT — Utah	Utah Insurance Department (UID) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Utah Consumer Privacy Act (UCPA) & Utah Cybersecurity Affirmative Defense Act (NIST/CIS Safe Harbor) ✓ Statutory NIST/CIS Tort Safe Harbor	`$1M/$2M DTS State Vendor E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.95x
VT — Vermont	Vermont Dept. of Financial Regulation (DFR) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	9 V.S.A. § 2430 (Security Breach Notice Act & Data Broker Registry)	`$1M/$2M ADS IT Contract E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.96x
VA — Virginia	Virginia Bureau of Insurance (SCC) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Virginia Consumer Data Protection Act (VCDPA — Va. Code § 59.1-575) & Va. Code § 18.2-186.6	`$2M/$4M VITA IT/Cloud Contract E&O + $3M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.03x
WA — Washington	Washington Office of the Insurance Commissioner (OIC) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	WA My Health My Data Act (MHMDA) & RCW 19.255.010 (30-Day AG Breach Notice)	`$2M/$4M WaTech DES IT Contract E&O + $3M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	1.09x
WV — West Virginia	West Virginia Offices of the Insurance Commissioner (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	W. Va. Code § 46A-2A-101 (Breach of Security of Consumer Information)	`$1M/$2M WVOT State Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.95x
WI — Wisconsin	Wisconsin Office of the Commissioner of Insurance (OCI) (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Wis. Stat. § 134.98 (Notice of Unauthorized Acquisition of Personal Information)	`$1M/$2M DOA DET Contract E&O + $2M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.96x
WY — Wyoming	Wyoming Department of Insurance (.gov)	No general B2B statutory E&O mandate (applies only to specific state bonding/clinical licenses)	Wyo. Stat. § 40-12-501 (Consumer Data Breach Notification)	`$1M/$2M ETS State Vendor E&O + $1M Cyber`	SMB: $1M Occurrence / $2M Aggregate E&O + $1M Cyber Ent: $5M Tech E&O + $5M Cyber ($250k–$500k Sublimits)	0.91x

Calculate Your State-Adjusted Premium or Check Your ACORD 25 COI

Cyber Insurance Cost Calculator & Professional Liability Cost by Industry — Applies the exact state NAIC rate multiplier above to your industry and revenue tier.
Tech E&O & Cyber Insurance Policy Requirements by Industry — Compare contractual MSA requirements for SaaS, FinTech, Healthcare HIPAA BAs, and IT Consultants.
Certificate of Insurance Requirements & Free ACORD 25 COI Checker — Audit your COI against SMB, SOC 2, and Enterprise contract floors.