FCA authorised · FRN 7249520117 325 0027Quote & buy →
Payroll bureaux
Run a client’s payroll and you hold their compliance in your hands — one mistimed submission or miscalculated deduction can leave them facing HM Revenue & Customs penalties they then look to recover from you. Professional indemnity insurance is the cover that answers a claim that your bureau’s error cost a client money.
Part of: Accountancy & finance PI
In short
Professional indemnity insurance protects a payroll bureau against a claim that a mistake in its work caused a client a financial loss — a late or incorrect Real Time Information submission, a miscalculated tax or National Insurance deduction, a missed auto-enrolment duty, an over- or under-payment of staff — and it pays to defend and to settle that claim where the bureau is liable. The exposure has a particular shape: the bureau earns a modest processing fee, but a single error can trigger HM Revenue & Customs penalties and interest, pension-regulator fines or employee claims that the client suffers first and then seeks to recover, far exceeding the fee. There is no statutory professional-indemnity minimum for most payroll bureaux and no single regulator that sets one — the right limit is driven by client contracts and the size of the payrolls handled, not by a regulatory floor, though a bureau run inside an accountancy practice may separately be caught by that body’s own requirements. Cover is written on a claims-made basis, so the policy that responds is the one in force when the claim is made, which makes continuity of cover and the retroactive date matter as much as the limit.
A payroll bureau is trusted with something a client cannot easily check for themselves: that the right people are paid the right amount, that the right tax and National Insurance reach HM Revenue & Customs on time, and that pensions and statutory payments are handled correctly. The bureau’s output flows straight to employees, to HM Revenue & Customs and to The Pensions Regulator, so when something is wrong it is wrong in a place that carries a penalty. Professional indemnity insurance answers a claim that the bureau’s work fell short and cost a client money — it meets the client’s proven loss where the bureau is liable and pays to defend the allegation, including where it proves unfounded.
The exposures are the ordinary work of a bureau, repeated across every pay run and every client:
Any one of these can turn a modest processing fee into a loss many times its size — the defining feature of the bureau’s exposure, examined in the next section.
| Typical claim against a payroll bureau | How professional indemnity is designed to respond |
|---|---|
| A late or incorrect Real Time Information submission leaves the client facing HM Revenue & Customs penalties and interest | Defends the negligence allegation and meets the penalty and interest where they are traced to the bureau’s error, with defence costs |
| Tax or National Insurance miscalculated, so the wrong amount is deducted or paid over | Responds to the client’s resulting loss and the cost of putting the error right, subject to the policy terms |
| Eligible workers not auto-enrolled, or contributions miscalculated | Answers the claim for the fines and arrears the client suffers where the bureau was responsible |
| A statutory payment or deduction handled incorrectly | Meets the loss flowing from the error, together with the cost of defending the claim |
| Employees overpaid through a processing error and the money cannot be recovered | Responds to the client’s loss attributable to the bureau’s negligence, subject to the terms |
| An allegation that proves unfounded | Pays the legal cost of defending it, which can be significant even where nothing is finally owed |
The final row matters as much as the rest. A client who believes the bureau cost them money can pursue a claim whether or not it has merit, and answering it takes time and usually a solicitor. Professional indemnity carries that cost; without it, the defence comes out of the bureau’s own pocket.
The exposure that defines payroll work is simple to state and easy to underestimate: the bureau makes the error, but the client suffers the penalty. A bureau files under its clients’ PAYE schemes as their agent, so when a submission is late or wrong it is the employer’s account that HM Revenue & Customs charges — late-filing penalties, inaccuracy penalties and interest all land on the client. The client then looks to the bureau to make good the loss the bureau’s mistake created.
That is what turns a small engagement into a large claim. The bureau earns a modest fee per payroll, but the penalty and interest are driven by the size of the payroll and the length of time an error goes uncorrected — sums that bear no relation to the fee. A mistake repeated across several pay periods, or across a client with a large workforce, can produce a loss far greater than the bureau was ever paid for the work.
Several features of the system sharpen the exposure:
This is exactly the loss professional indemnity is built to answer: where the penalty and interest flow from the bureau’s failure to exercise reasonable skill and care, and the client seeks to recover them, the policy responds to that loss and funds the defence, subject to its terms, limit and excess.
Payroll has grown well beyond calculating pay, and each duty the bureau takes on brings its own way of going wrong.
Auto-enrolment and workplace pensions. A bureau administering pensions is working to duties set by The Pensions Regulator: assessing the workforce, enrolling eligible jobholders at the right time, calculating and remitting contributions, handling opt-outs and re-enrolment, and keeping the records behind it. Fail to enrol someone who should have been enrolled, or miscalculate contributions, and the client can face fines and back-payments — a loss they will attribute to the bureau that ran the scheme.
Statutory payments, deductions and the minimum wage. Statutory sick pay, maternity and paternity pay, student loan deductions and attachment-of-earnings orders each carry their own rules and timing, and an error can underpay an employee or leave a client out of step with HM Revenue & Customs. Pay structures also have to keep staff above the National Minimum Wage and National Living Wage; a payroll treatment that drops someone below the floor is a compliance problem the client will expect the bureau to have caught.
Employee data. A bureau holds some of the most sensitive personal data there is — names, addresses, National Insurance numbers, salaries, bank details and, behind sick pay, information about health. That data is governed by the UK GDPR and the Data Protection Act 2018, and a bureau is usually a processor acting on its client’s instructions. A breach — a payslip emailed to the wrong person, a lost laptop, a phishing attack or ransomware — can harm individuals and draw the attention of the Information Commissioner.
Here the line between covers matters. Professional indemnity answers a negligence claim — a client or third party alleging that the bureau’s work caused a financial loss. The breach itself — notifying those affected, forensic investigation, restoring systems, responding to extortion — is the territory of cyber insurance, not professional indemnity. Because payroll sits on exactly the data criminals want, it is worth asking a specialist broker how the two wordings fit together so no gap opens between them.
| Typical exposure | Cover usually designed to respond |
|---|---|
| A negligent payroll, pension or statutory-payment error that causes a client a financial loss | Professional indemnity |
| Responding to a data breach itself — notification, forensic investigation and restoring systems | Cyber insurance, rather than professional indemnity |
| An extortion or ransom demand, and business interruption, after an attack on the bureau’s systems | Cyber insurance |
| A claim by an affected party alleging the breach resulted from the bureau’s negligence | May engage both covers depending on the wordings — a reason to align them |
A payroll bureau is not expected to be infallible. The legal test is reasonable skill and care — the standard of a reasonably competent payroll provider — and professional indemnity answers a failure to meet it, not every error a client is unhappy about. How the work is defined feeds directly into that standard, which is why a clear engagement or service agreement earns its place.
Scope and the client’s own data. A bureau can only work from the information the client supplies — hours, starters and leavers, changes to pay and tax codes. An agreement that sets out what the bureau is responsible for, what the client must provide and by when, and where the bureau’s role ends keeps a claim within the risk the bureau actually took on, and helps separate a genuine processing error from a loss caused by late or wrong data from the client.
Almost all professional indemnity is written on a claims-made basis, and it is the feature bureaux most often misread. The policy that responds is the one in force when the claim is made, not the one held when the payroll was run. Two things follow:
Run-off. Payroll errors have a long tail — HM Revenue & Customs can look back over past years, and an employee or client can raise a problem long after the event. When a bureau stops trading, sells the book or the owner retires, run-off cover keeps a policy behind that past work once the business has closed; without it, a later claim lands on the owner personally with nothing to answer it. Run-off is generally treated as essential rather than optional.
Presenting the risk. When cover is taken out or renewed, the Insurance Act 2015 imposes a duty to make a fair presentation of the risk — describing the bureau honestly, including the number and type of payrolls handled and any higher-risk work, rather than playing it down. A misrepresentation or an undisclosed material fact can reduce a payout or let the insurer avoid the policy, so an accurate presentation is what lets cover respond cleanly.
How much cover, and who sets it. Most payroll bureaux face no statutory professional-indemnity minimum and no regulator that fixes one; the right limit is driven by the contracts clients ask the bureau to sign and by the scale of the payrolls handled — the potential loss a serious error could cause — rather than by a round number. A bureau run within an accountancy practice is a separate case: the practice’s own professional body may set a requirement at principle level, and that should be checked. A specialist broker can help size the limit to the work.
It is worth asking us to re-market your cover when:
We would rather say so than waste your time. We are probably not for you if:
For most payroll bureaux there is no statutory minimum and no single regulator that sets one. In practice, though, client contracts frequently require cover, and it is difficult to win or keep larger payroll clients without it. A bureau that operates within an accountancy practice is a separate case, because that practice’s own professional body may require cover.
It responds to claims that the bureau’s work caused a client a financial loss — a late or incorrect Real Time Information submission, a tax or National Insurance miscalculation, a missed auto-enrolment duty, a mishandled statutory payment or an overpayment of staff. It meets the client’s proven loss where the bureau is liable and pays to defend the claim, including where the allegation proves unfounded. What is and is not covered depends on the policy wording, limit and excess.
This is the classic payroll-bureau claim. Because the bureau files under the client’s PAYE scheme, the penalty and interest land on the client first; where they flow from the bureau’s failure to exercise reasonable skill and care and the client seeks to recover them, professional indemnity is designed to respond to that loss and to fund the defence, subject to the policy terms.
Only in part. Professional indemnity answers a negligence claim arising from the bureau’s work. The breach itself — notifying those affected, forensic investigation, restoring systems and responding to any extortion — typically falls to cyber insurance rather than professional indemnity. Because payroll holds such sensitive personal data, it is worth arranging the two together and checking how the wordings fit so no gap opens between them.
A claims-made policy responds to claims first made against the bureau during the current period, provided the work was done after the retroactive date. The policy in force when the client complains is the one that pays — not the one held when the payroll was run — so a gap in cover, or a retroactive date that does not reach back far enough, can leave past payrolls uninsured.
Usually, yes. Payroll errors can surface years later, because HM Revenue & Customs can look back over past years and employees or clients can raise a problem long after the event. Simply cancelling when the bureau closes leaves nothing to answer a claim that arrives afterwards; run-off cover keeps a claims-made policy behind the work once the business has ceased trading.
There is no set figure. Size the limit to the scale and number of payrolls handled and the loss a serious error could realistically cause, alongside whatever client contracts require — not simply to a minimum. A bureau within an accountancy practice should also check any requirement set by that practice’s professional body. A specialist broker can help you judge it.
Tell us about the payrolls you run — how many, for what kind of clients, and the systems you work in — and a specialist broker can arrange professional indemnity cover sized to the work, with the continuity and retroactive date your past payrolls need. No jargon, no obligation. Or call 0117 325 0027.
Get a quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about professional indemnity insurance, not advice on your individual circumstances, and it does not guarantee that cover will be available or on what terms.
