Compliance consultants

Professional indemnity for compliance consultants

You advise a business on how to meet a regulatory obligation — an anti-money-laundering regime, a data-protection duty, a sector rule — the client follows your advice, and is then found non-compliant. When a fine, a sanction or a finding of breach lands, the question that follows is whether the adviser got it wrong. Professional indemnity insurance exists for that moment: it responds when a client says your compliance advice was negligent and looks to you for the loss.

Part of: Professional indemnity at Apex

In short

A compliance consultant needs professional indemnity insurance because clients rely on your advice to meet their regulatory obligations — and if that advice is alleged to be negligent, whether a gap your audit missed, a policy or procedure you designed that failed in practice, or guidance that left the client in breach, you can be sued for the loss that follows. Professional indemnity responds to your legal liability for negligent advice and, just as importantly, funds the cost of defending the allegation, even where it proves unfounded. It does not pay the client’s regulatory fines, which are generally uninsurable, and it does not take on the client’s own legal responsibility for compliance, which always remains theirs. There is no statutory minimum limit for a compliance consultant; the figure is usually driven by the contracts you sign and the size of the clients you advise.

Why a compliance consultant needs professional indemnity insurance, and what it covers

Compliance advice is acted on. When you tell a client how to meet an obligation — how to structure anti-money-laundering checks, what a data-protection process must do, how a sector rule applies to them — they build their systems around your conclusion. If that conclusion is later said to be wrong, and a loss followed, you can be held responsible for it. Professional indemnity insurance is the cover that responds when a client alleges that negligent compliance advice, or a mistake in your work, has cost them money.

It answers two things that usually arrive together: the client’s financial loss, and the cost of defending the allegation — legal and expert fees that mount up whether or not the claim is well founded. An unfounded allegation still has to be investigated and answered, and that is often where the real expense and strain lie.

Typical claim against a compliance consultant	How professional indemnity responds
A gap-analysis or audit missed a failing, and the client was later found in breach	Responds to your liability for the loss caused by reliance on your findings, and funds the defence
A policy or procedure you designed did not work in practice	Responds to the claim that the document fell below a reasonable professional standard
Advice on how a regulation applied that turned out to be wrong	Meets the loss that flows from the negligent interpretation, subject to the policy
A control framework certified as adequate that a regulator later found deficient	Covers the loss from the client’s reliance on your assurance
A registration, notification or deadline you were engaged to manage and missed	Responds to the value lost through the error, together with the defence costs
An unfounded allegation that your advice caused a breach	Funds the legal and expert cost of investigating and defending it

Cover is for civil liability arising from your professional work. It does not replace the client’s own compliance function, and it does not rescue a problem you spotted and failed to flag.

When the client is fined or sanctioned — and looks to the adviser

The exposure that defines this work is specific: your advice is followed, and the client is still found non-compliant — fined by a regulator, sanctioned, or held in breach. When that happens, the client’s first question is often whether the adviser who guided them got it wrong, and a civil claim that your advice was negligent can follow.

Here a clear distinction matters. A regulatory fine or penalty imposed on the client is generally uninsurable — the law does not allow a business to insure away a penalty meant to punish and deter, and professional indemnity does not pay it. What the cover can respond to is different: your own professional liability for negligent advice, and the cost of defending the allegation that your work caused the client’s loss. The fine belongs to the client; the claim that you should answer for it is where your policy sits.

Two duties run in parallel and should not be confused. The client carries the primary legal responsibility for its own compliance — the duty to meet the regulation is theirs and cannot be delegated to an adviser. You carry a professional duty to advise with reasonable skill and care. Professional indemnity attaches to your duty, not the client’s: it covers your liability if your advice fell short, but it does not assume the client’s own obligation to comply. Being named after a regulatory finding also carries reputational weight that cover cannot remove — but you are not left to meet the claim alone.

Scope, and the line between compliance advice and regulated or legal advice

Much of a compliance consultant’s risk is settled before any advice is given, in how the engagement is defined — and in staying on the right side of two lines you must not cross.

Do not stray into reserved legal advice. Interpreting the law for a client, drafting certain instruments, or advising on rights and liabilities can amount to legal services that are reserved to regulated lawyers. A compliance consultant who crosses that line takes on a liability the policy may not have been written for, and may be acting outside the law.
Do not stray into regulated financial advice. Advising on the obligations around a regulated activity is not the same as giving regulated financial advice, which is an authorised activity in its own right. Keep your work to compliance and governance, and refer regulated advice to those authorised to give it.
Put your scope in writing. A clear engagement letter should state the obligations the work covers, the areas it excludes, the information the client must provide and the limits of your role. Disputes often turn less on whether the advice was right than on what you had agreed to do.

Compliance consultants work across many areas — anti-money-laundering regimes, data protection under the UK GDPR and the Data Protection Act 2018, sector-specific rules, and governance and audit support — and each carries its own exposure. Whatever the field, insurers assess the activities you declare, so a tightly defined scope and a record of the advice you gave, on what information, make a claim far easier to defend. When you place or renew cover, the Insurance Act 2015 requires a fair presentation of the risk, so describe the work you actually do rather than playing down its specialist or higher-risk parts.

Reasonable skill and care, claims-made cover, retroactive date and run-off

You are not a guarantor that a client will never be found in breach. The legal standard is reasonable skill and care — the standard of a reasonably competent compliance professional at the time — so professional indemnity responds to a failure to meet it, not to every adverse regulatory outcome. Advice that was competent and reasonable when it was given is not negligent simply because a regulator later took a different view.

Cover is written on a claims-made basis: the policy that responds is the one in force when a claim is made, or a circumstance is notified, not the one you held when you did the work. Two features follow from that.

Retroactive date. A claims-made policy usually reaches back only to this date. It must sit at or before your earliest relevant advice; a later date can leave your oldest, and often most exposed, work uninsured.
Run-off cover. Compliance failings can surface long after the advice — a regulator may look back over past periods, and a breach can come to light years later. Run-off keeps a claims-made policy answering those claims after you retire, sell or stop trading, and for a compliance adviser it is best treated as essential rather than optional.

There is no statutory minimum limit for a compliance consultant, and no regulator sets one the way it is set for reserved legal work or audit. The right figure is driven by your client contracts and your own judgement — the size and complexity of the clients you advise, and the potential scale of a loss if advice goes wrong — rather than by any fixed floor. Because a single claim can be substantial, a specialist broker can help you size the limit to the work rather than to a round number.

How Apex places professional indemnity for compliance consultants

A short fact-find, not a 40-question form. We ask about your work as compliance consultants: what you do, who for, fee income, staff, contracts, claims and anything unusual.
A written presentation to insurers. Under the Insurance Act 2015 you have a duty of fair presentation. We help you meet it — and a well-presented risk gets better terms than a bare proposal form.
Quotes set out to compare. Usually three or four, with limits, excesses, retroactive dates, exclusions and premium side by side, and our recommendation in plain English.
No gap in cover. If you are moving from another broker, insurer or scheme, we put the new policy in place before the old one lapses and check the retroactive date protects your past work.
The same person afterwards. Mid-term changes, contract queries, certificates for clients, circumstance notifications and next year’s renewal all go through your named broker.

Why compliance consultants move their PI to Apex

Owned by its directors, not for sale. No consolidator, no private-equity owner, no external shareholders — and we have declined approaches to buy the firm. Read the Apex Independence Charter.
Independent, not tied. No single-insurer scheme, no in-house policy, no placement quotas — the recommendation is the one that fits, not the one we are paid to push.
Over 30 markets, including Lloyd’s. Specialist UK PI insurers and Lloyd’s syndicates via wholesale, so a risk that one underwriter dislikes can still be placed properly with another.
Usually three or four competing quotes, laid out side by side — limit, excess, retroactive date, exclusions and premium — with a plain-language note on the trade-offs.
The stay-put letter. If your existing cover is right, we say so in writing, free and without obligation. How the stay-put letter works.
A named broker all year. The person who places your cover is the person who picks up the phone at renewal, on a mid-term change, or when a letter of claim lands.
Director-level attention on claims. We help you notify circumstances early and in the right form, stay involved once the insurer’s panel solicitors are appointed, and tell you plainly where you stand.
Directly authorised by the FCA since 2016, not an appointed representative trading under someone else’s permissions.

When it is worth getting a second quote

It is worth asking us to re-market your cover when:

You have outgrown a professional-body or adviser-network scheme, or an online-only policy, and nobody has re-marketed your risk in years.
A client, lender, framework or regulator now requires a higher limit, a different basis of cover, or evidence your existing broker cannot produce quickly.
Your insurer has non-renewed, withdrawn from your profession, or imposed an exclusion you were not warned about.
Your renewal rose sharply with no explanation, or the person who knew your firm has left, retired, or been absorbed into a consolidator.
You have a claim, a circumstance, a CCJ or something else non-standard, and your current arrangement treats it as a tick-box decline.
Your broker has been bought by a consolidator or a global broker and the independence you chose them for has gone.

When we are not the right broker

We would rather say so than waste your time. We are probably not for you if:

You want the cheapest possible policy bought online in five minutes with no conversation. An online-only product may suit you better, and we would rather say so than waste your time.
Your regulator or professional body requires you to use one specific scheme with no alternative. That is rare, but where it applies we will tell you.
You are outside the UK, or your firm is effectively a US-domiciled business with a UK office.

Related guides

Frequently asked

Is professional indemnity insurance a legal requirement for compliance consultants?

There is no statutory requirement for a compliance consultant to hold professional indemnity insurance, and no regulator sets a minimum limit the way one is set for some professions. In practice it is close to essential: client contracts frequently require it before you can be engaged, and it protects your own finances if a claim follows your advice.

If my client is fined by a regulator, will my insurance pay the fine?

No. A regulatory fine or penalty imposed on your client is generally uninsurable, because the law does not allow a penalty meant to punish and deter to be insured away. What professional indemnity can respond to is different — your own liability if the client alleges your negligent advice caused their loss, together with the cost of defending that allegation.

My client carries the legal duty to comply — how can a claim still reach me?

The client carries the primary legal responsibility for its own compliance, and that duty cannot be delegated to an adviser. But when you give advice you owe a separate duty to exercise reasonable skill and care, so if your advice is alleged to have fallen short and the client suffered a loss as a result, the client can bring a civil claim against you even though the underlying obligation was theirs.

What does professional indemnity actually cover for a compliance consultant?

It responds to claims that your advice or work caused a client a financial loss: a gap an audit missed, a policy or procedure that failed in practice, a misreading of how a regulation applied, or a notification or deadline you were engaged to manage and missed. It covers both the client’s loss and the cost of defending the allegation, including where it proves unfounded. What is and is not covered depends on the policy wording, limit and excess.

What is the boundary between compliance advice and regulated or legal advice?

Compliance consultants advise on meeting regulatory and governance obligations; they should not stray into reserved legal advice or regulated financial advice, which are activities for those authorised to provide them. Crossing that line can take you outside both your competence and the cover your policy was written for. A clear engagement letter that defines your scope, and referring on work that belongs to a lawyer or an authorised adviser, keeps you on the right side of it.

Does it matter which compliance areas I work in, such as AML, data protection or sector rules?

Yes. Insurers assess the activities you declare, and different areas carry different exposures — anti-money-laundering work, data protection under the UK GDPR and the Data Protection Act 2018, and sector-specific rules each behave differently. Describing your work accurately matters for more than pricing: under the Insurance Act 2015 you have a duty to make a fair presentation of the risk when you take out or renew cover, so that the policy responds cleanly when it is needed.

What is claims-made cover, and why do the retroactive date and run-off matter?

Professional indemnity is claims-made: the policy in force when a claim is made, or a circumstance notified, responds, whatever year you did the work. So the retroactive date must reach back to your earliest advice, and run-off matters when you stop — compliance failings can surface years later, when a regulator looks back over past periods, so run-off keeps past work covered after you retire, sell or cease trading.

Get professional indemnity cover built around the compliance advice you give

Tell a specialist broker about the compliance work you do, the regulatory areas and sectors you advise on, and any limit your client contracts require, and cover can be sized to the real exposure — claims-made, with a retroactive date and run-off that reflect how late a compliance claim can surface. Share the details of your practice and ask for terms. Or call 0117 325 0027.

Get a quote Request a callback

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about professional indemnity insurance, not advice on your individual circumstances, and it does not guarantee that cover will be available or on what terms.