Do marketing agencies need professional indemnity insurance?

Reviewed by Matthew Bartlett, Director, Apex Insurance Brokers Limited · Last reviewed 2026-08-05

The short answer, explained

Marketing agencies sit in an unusual position. There is no statute that says you must buy PI, and unlike solicitors or financial advisers you are not overseen by a regulator that makes cover a condition of trading. So the honest answer is not a flat "legally required."

The answer is usually yes for a different reason: PI insurance responds when a client alleges your professional work caused them a financial loss — a campaign that underperformed against a contractual promise, a design that infringed someone's copyright, a strapline that landed you both in a defamation dispute. Those are the everyday exposures of agency work, and they are exactly what PI is built to cover. The question is rarely whether the risk exists, but whether you want to carry it yourself or transfer it.

When PI is actually required

For most agencies the trigger is not a regulator — it is a contract. Cover becomes a hard requirement in situations like these:

• Client master services agreements (MSAs). Larger brands, retainer clients and public-sector buyers routinely insert a clause requiring the agency to hold PI at a stated limit (commonly £1m, £2m or £5m) for the life of the engagement.
• Tenders and RFPs. Procurement questionnaires frequently ask you to evidence PI before you can even be shortlisted. No certificate, no bid.
• Framework and supplier onboarding. Being added to a client's approved-supplier list or a marketing framework often makes a minimum PI limit a pass/fail requirement.
• Sub-contracting to another agency. If you deliver work through a lead agency, their contract with the end client is usually flowed down to you, insurance clause included.

If any of the above applies to you, PI stops being optional. Read the exact wording: contracts specify the limit, sometimes whether it must be "each claim" or "in the aggregate," and often that it must be maintained for a period after the work ends.

Check the limit your client contract asks for and get a quote →

Regulators and membership bodies — what actually applies

It helps to separate the bodies that regulate advertising conduct from those that would ever require insurance.

Advertising content in the UK is governed by the CAP Code (the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing), enforced by the Advertising Standards Authority (ASA). That framework dictates what your campaigns can claim; it does not require you to hold insurance. But breaching it — a misleading claim, an unsubstantiated performance figure — is precisely the kind of dispute that can turn into a client complaint against you.

If your work involves personal data, the UK GDPR and the Data Protection Act 2018 apply, overseen by the Information Commissioner's Office (ICO). Again, no insurance mandate, but data errors create liability. Note that PI and cyber cover address different things — a data breach usually sits with cyber, while negligent handling of a client's data may touch PI — so check both.

Where your agency creates financial promotions for regulated clients (banks, insurers, lenders), the financial promotion rules under the Financial Services and Markets Act 2000 apply to that content, and it must be approved by an appropriately authorised person. That raises the stakes on getting the work right.

On membership: industry bodies such as the IPA (Institute of Practitioners in Advertising), DMA (Data & Marketing Association), PRCA and CIPR set professional and ethical standards for members. Standards and best practice are their focus rather than a blanket insurance rule, so treat any membership condition as something to check against your specific grade of membership — not to assume either way.

The specific risks agencies carry

This is where marketing differs from a generic "any professional" case. Your exposure is a blend of advice risk and creative/IP risk, and a good PI policy for agencies is usually extended to cover both:

Because IP infringement and defamation are so common in creative output, always confirm your PI policy explicitly extends to them — not every off-the-shelf wording does. That single check is often the difference between a policy that fits an agency and one that leaves a gap.

How much cover do you need?

There is no universal figure. The right limit is driven by two things: what your largest client contract demands, and the realistic worst-case cost of a claim — which for agencies often reflects the size of the media budgets and brands you handle. Common options are £1m, £2m and £5m of cover; buyers of your services will frequently state the minimum they expect. Choose a limit that meets your toughest contractual requirement rather than the one that simply looks cheapest.

Common questions

Is professional indemnity insurance a legal requirement for a marketing agency?

No. There is no UK statute or regulator making PI compulsory for marketing agencies. It becomes a practical requirement through client contracts, tenders and supplier onboarding rather than through law.

We only design and produce content — do we still need it?

Usually yes. Creative and content work carries some of the highest IP-infringement and defamation exposure in the sector. A single unlicensed image or contested strapline can lead to a claim, so PI extended for IP and defamation is particularly relevant.

What is the difference between PI and cyber cover for an agency?

PI responds to allegations that your professional work caused a client a financial loss. Cyber responds to data breaches, hacking and system incidents. Agencies handling client data often need both, because they address different exposures.

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority (FRN 724952). This guide is general information, not advice on a specific policy or a substitute for your policy wording.