Kathmandu. The challenges in insurance coverage are increasing as cyber regulations are tightened in the Asia Pacific region. Cybersecurity and data privacy regulations in the Asia Pacific region are entering a period of intense scrutiny, increasing the potential financial risk from a cyber incident with stricter enforcement, higher penalties, and extended breach notification requirements.
According to a joint report by global insurance broker Aon and law firm Wotton Kearney, regulatory frameworks across the region are expanding faster than some institutions’ incident response and insurance strategies. “The Changing Cyber Risk Landscape in APAC notes that Australia and India are strengthening enforcement regimes and increasing maximum fines, while Mainland China is expanding regional reach beyond what it needs.” Recent reforms in Indonesia, Japan, Malaysia, New Zealand, Singapore, South Korea, Thailand and Vietnam have also formally strengthened breach reporting requirements and regulatory powers.
According to the AON, the results can vary significantly between jurisdictions, with cyberincident violations, information rules, enforcement limitations and sanctions, potentially parallel investigations, and the consequences of overlapping penalties for incidents that affect multiple markets. The report also highlighted uncertainty over the insurability of cyber-related fines and penalties. “This may depend on local law, public policy and court practice rather than the words of the insurance police,” the report said.
According to Aon, the changed regulatory environment can also expose flaws in cyber insurance programs. “Especially when higher fines are matched by increased defense and incident response costs,” Aon said.
According to Emma Carolan, head of cyber claims and coverage Asia Pacific, organisations should use simulations to identify gaps in information processing, internal approvals and insurance policy structures. “Claims should not be detected before a major cyber incident occurs,” he said. – Agency
