Do UX researchers need professional indemnity insurance?
Reviewed by Apex Insurance Brokers · Last reviewed 2026-08-05
UX research sits in an unusual position. It is not a regulated profession like law or accountancy, yet the work directly shapes product decisions worth serious money to your clients. When a design direction fails, someone looks for a cause — and the researcher who recommended it can find themselves in the frame. This page explains exactly when a UX researcher genuinely needs PI cover, and when you can reasonably do without it.
Is professional indemnity insurance a legal requirement?
No. Unlike motor insurance or employers' liability insurance, PI is not compulsory by statute for UX researchers. There is no equivalent of a legal or medical regulator setting a mandatory minimum. So if you work purely on your own products, or as an employee inside a company on the firm's own payroll, you are unlikely to need your own PI policy — your employer's insurance and their duty of care cover the work.
The picture changes the moment you contract with clients as a freelancer, a limited company or an agency. That is where PI stops being optional in practice, even though it never becomes a legal duty.
When client contracts make PI essential
The most common reason UX researchers buy PI is that a client insists on it. Larger organisations, public-sector bodies and design consultancies frequently include an insurance clause in their contracts or on their supplier onboarding forms. A typical clause requires you to hold and maintain professional indemnity cover of a stated amount — often £1m or £2m, sometimes £5m for enterprise or government work — for the duration of the engagement.
If you cannot produce a certificate, you simply do not get onboarded, or the contract does not get signed. In that sense the requirement is contractual rather than legal, but the effect is the same: no cover, no work. It is worth checking the exact wording before you agree, because the required limit and any run-off obligations vary from client to client.
Check the limit your client's contract specifies before you quote, so your cover matches the clause exactly.
Professional bodies and membership requirements
UX research has no single mandatory professional body in the UK. Membership organisations that researchers may belong to — such as the Market Research Society (MRS), whose Code of Conduct governs research standards and participant treatment, or the UX Professionals Association (UXPA) — set ethical and quality expectations, but they do not license you to practise and generally do not compel members to carry PI insurance.
That said, if you conduct research that falls under the MRS Code, you are expected to work to defined standards around informed consent, data handling and honest reporting. Falling short of those standards is exactly the kind of failing a professional negligence claim can allege — which is another reason cover is prudent even though no body demands it.
The specific service risks PI covers for UX researchers
Generic descriptions of PI are not much help here, so it is worth being concrete about how a UX researcher actually gets sued. The core risks are:
- Flawed or misleading findings. A client makes a costly product or investment decision based on research you delivered, then argues the methodology was inadequate, the sample unrepresentative or the conclusions unsupported. PI responds to allegations of professional negligence.
- Breach of confidentiality. UX research involves sensitive participant data, unreleased product designs and commercial strategy. An accidental disclosure — a leaked recording, a misdirected report — can prompt a claim.
- Data protection failures. Researchers routinely handle participants' personal data, which brings obligations under the UK GDPR and the Data Protection Act 2018. Most researchers processing personal data must also register with the Information Commissioner's Office (ICO) and pay the data protection fee. A mishandling allegation can sit alongside a negligence claim.
- Intellectual property or confidentiality disputes. Claims that you reused a client's proprietary material, or that deliverables infringed a third party's rights.
- Missed deadlines or defective deliverables that the client says caused them financial loss.
Crucially, PI covers not just a settlement but the legal defence costs of fighting a claim — and defending even a weak, unfounded allegation can be expensive.
Do you need it? A quick guide
| Your situation | PI usually needed? |
|---|---|
| Employed in-house on the company's own products | No — employer's cover applies |
| Freelance UX researcher with client contracts | Yes — contracts commonly require it |
| Agency delivering research to clients | Yes — and often at higher limits |
| Contractor via public-sector or enterprise frameworks | Yes — usually mandated in the terms |
| Handling participant personal data | Strongly advisable (plus ICO registration) |
Need cover that matches a client's contract clause — and your actual research risk?
Get a PI quote →How much cover, and what to pair it with
The right limit is usually driven by your contracts. If a client specifies £1m, hold at least £1m; if you work across several clients with different clauses, size to the highest requirement you face. Common options are £1m, £2m and £5m of cover per claim or in aggregate.
UX researchers often pair PI with public liability (useful if you run in-person usability sessions or visit client sites) and, given the data-heavy nature of the work, cyber insurance to address data breaches and the response costs that fall outside a standard PI wording. A broker can help you see where PI ends and cyber begins so you are not left with a gap.
Common questions
I only do occasional freelance UX work — do I still need PI?
If you contract with clients, yes, even occasionally. A single project can generate a claim, and your contract will often require cover regardless of how many hours you bill.
Does PI cover a data breach involving research participants?
PI may respond to a confidentiality or negligence allegation, but breach-response costs, notification and regulatory issues are usually better addressed by dedicated cyber insurance alongside your ICO obligations. Ask a broker to confirm what each policy actually covers.
My client dropped the insurance clause — can I cancel?
Be careful. Claims can be made after a project ends, and PI works on a claims-made basis, so you may need continuing or run-off cover for past work even once a contract closes.
Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority (FRN 724952). This guide is general information, not advice on a specific policy or a substitute for your policy wording.