Cyber Liability and Data Breach Insurance in Iran
For online shops, service platforms, fintech and software companies and any business processing customer data.
Persian twin page (authoritative): /liability/corporate/cyber-liability
Short answer
Cyber liability insurance in Iran compensates customers and third parties for damage caused by unauthorized disclosure of personal data, ransomware attacks and service interruption, and covers notification, forensic investigation and data recovery costs, plus legal defense in data claims, up to the policy limit, in line with the E-Commerce Act duties.
The final premium is issued upon official quotation — no premium figures are published on this site.
Who needs this policy?
- Online shops and businesses processing customer data
- Service platforms, technology startups and software companies
- Companies with online payment systems and small financial institutions
- Educational and medical centers holding electronic records of their visitors
- Accounting, legal and consulting firms holding confidential client information
What is covered?
| Coverage | Description |
|---|---|
| Personal data breach and disclosure | Compensation of third parties and customers for unauthorized disclosure of personal data, including notification costs and trust-rebuilding measures. |
| Cyberattacks and service interruption | Losses from ransomware attacks, denial-of-service attacks and interruption or disruption of services, under the general conditions. |
| Notification and data recovery costs | Costs of notifying data owners, security forensics and recovery of damaged data after the incident. |
| Legal defense and stakeholder claims | Attorney fees and court costs in customer lawsuits and claims arising from data violations, even in dismissed claims. |
| Electronic Commerce Act compliance | Cover of the costs of responding to supervisory authorities and observing the duties of Article 58 of the Electronic Commerce Act, excluding monetary fines. |
What is not covered? (Exclusions)
- Damage caused by deliberate manipulation or fraud by the insured's own staff
- Disruption from documented and knowing disregard of expert security warnings
- Monetary fines and penalties transferable to a person
- Claims arising from a security flaw existing before the start of cover and known to the insured
- Physical theft of equipment and purely hardware damage
Issuance conditions
- Authorized processing of personal data in line with the Electronic Commerce Act duties
- Implementation of minimum security measures such as encryption and incident logging
- Accurate declaration of the volume and type of processed customer data at issuance
Required documents
- Business license, official gazette or company registration documents
- Description of the systems and the types of processed customer data
- Latest security assessment or penetration test report, where available
- Latest liability policy, for claims history
- Privacy policy and key service contracts
How to buy — step by step
Quotation and system review
Submit the quote request; the systems and the type and volume of processed data are declared, and a limit is proposed.
Documents and official proforma
After the registration documents and system descriptions are received, an official proforma invoice is issued on the approved Bimeh Iran tariffs.
Premium payment
Pay through the banking gateway or a bank receipt; cover starts the moment issuance is confirmed.
Policy delivery
The printed and electronic policy with its general conditions is delivered within one working day.
How to claim — step by step
Immediate notification
Report the incident to the agency immediately after discovery, within the notification deadline set by the policy.
Claim form
Complete and sign the claim form describing the incident, the affected data and the systems involved.
Case documents
Submit the system logs, the incident report, the security assessment and the correspondence with affected customers.
Forensic and legal assessment
Security forensics establish the scope of the breach, and the adjuster examines the policy conditions and exclusions.
Notification coordination
Notification of data owners is coordinated with the insurer and made in line with the legal duties.
Agreement and payment
Once liability and the amount are established, compensation and recovery costs are paid subject to the policy deductible.
Claim notification deadlines and assessment details follow the policy general conditions and the Iranian Insurance Act (Article 30 practice: notification within five working days).
FAQs — Cyber Liability & Data Breach Insurance
Legal sources
Electronic Commerce Act of Iran (2004) — Article 58 — protection of personal data
Civil Liability Act of Iran (1960) — Articles 1 to 11 — fault-based civil liability
General Conditions of Liability Insurance — Central Insurance Regulation No. 57
Iranian statutes are authoritative in Persian; English titles above are orientation references.
Reviewed by the Iran Liability Insurance content team
Reviewed by the licensed team of Agency No. 20616 of Bimeh Iran, specialized exclusively in liability insurance.
Legal review: licensed team of Agency No. 20616, Bimeh Iran — Last reviewed: 24 October 2026
Get Cyber Liability & Data Breach Insurance through the official Bimeh Iran agency
The online quote form is in Persian. English-speaking visitors may submit inquiries by email in English, and a consultant will respond in English. The quotation is issued on current Bimeh Iran tariffs after the limit of liability is agreed.