Incident response
- 24/7 reporting line
- Forensic investigation
- Recovery and restart
Cyber insurance for psychologists
At a psychology practice the problem is not the size of the file but the content of each individual record.
- several insurers compared objectively
- 9.5 customer rating for a new policy
- AFM licence 12016589
- Personal 072 - 509 24 56, weekdays 9–17
This page in another language: Nederlands
Work out for yourself what it would cost.
Enter your details; you will receive a proposal within one working day.
- We compare the offerings of several insurers
- An adviser checks whether the cover suits your activities
- We arrange the switch, including cancellation
A premium indication, not personal advice. Prefer to talk it through? Call 072 - 509 24 56.
- Independent advice
- Several insurers
- Switching arranged
- Help with claims
In brief
A psychologist keeps few records compared with an employment agency or a webshop, but what is in them is of a different order: notes of sessions, diagnoses, medication, family situations and observations a client told nobody else. A breach of that is impossible to undo and cannot be made good with a new password or a stolen bank card that is blocked.
There is a double obligation on top of that. Alongside the GDPR, your professional secrecy applies, anchored in Article 7:457 of the Dutch Civil Code for the treatment relationship and in the Wet BIG (the Dutch act on healthcare professions) for registered practitioners. A data breach is therefore both a privacy matter and a possible disciplinary matter. The WGBO (the Dutch act on the medical treatment contract) also requires you to keep the record for a long period, so clearing out old data is not an option.
If you work in a practice with several care providers, also compare the perspective of the physiotherapist and the dental practice: there, failure of imaging and equipment weighs more heavily than confidentiality.
Independent, personal, sorted quickly
We compare your cyber insurance across dozens of insurers, explain where the real differences lie, and arrange the switch from start to finish — without you having to chase it yourself.
Cyber insurancePhoto coming soon
ComparePhoto coming soon
Get coveredPhoto coming soon
What does cyber insurance for psychologists cover?
The structure of the cover in three parts, with an overview per situation below.
Own damage
What the incident costs you yourself.
- Data recovery and reconstruction
- Business downtime
- Ransom under consideration
Liability
Claims from customers and data subjects.
- Claims after a data breach
- GDPR notification costs
- Legal assistance
What is covered
| Situation | Cyber | AVB | BAV |
|---|---|---|---|
| Ransomware brings your systems down | Yes | No | No |
| Data breach involving personal data | Yes | No | Sometimes |
| Costs of notification and informing those affected | Yes | No | No |
| Fraud through a falsified payment instruction | Sometimes | No | No |
| Administrative fine from the regulator | No | No | No |
| Hardware that is physically damaged | No | No | No |
This overview is general in nature and is not personal advice. What is actually covered, including exclusions, limits and the excess, is set out in the policy conditions and the insurance card (verzekeringskaart) of the insurer; you receive both before you take out cover. Taking out cover without advice? Then read what execution only means for you.
What does your premium depend on?
- Nature of the data. Special categories of personal data about health weigh more heavily per record than ordinary customer data.
- Number of active and archived records. The duty of retention under the WGBO means that old records also count towards the number of people affected by a breach.
- Record-keeping and billing software used. Whether you work in a certified healthcare package or in general office applications with loose folders.
- Channels for remote contact. Video calling, a client portal and email traffic with clients determine how many places hold data outside the record.
- Access control within the practice. Working with personal accounts, two-factor authentication and rights per therapist instead of shared logins.
- Form of practice and number of therapists. A group practice with locums and students on placement has more points of access than a single-handed practice.
Insurers weigh these details differently. That is where your saving is.
How we arrange it
- You request a quoteWe take stock of your situation, your risk and your wishes.
- We compareseveral insurers, on premium as well as conditions.
- You receive a proposalWith an explanation of the differences and the exclusions.
- We arrange the switchIncluding cancellation, so there is no gap in cover.
Why arrange it through Finass Verzekert?
We look at the terms as well as the premium, and stay your point of contact when there is a claim.
Independent
We are not tied to one insurer and compare on the basis of an objective analysis of several companies.
One fixed adviser
You call or email someone who knows your file. No menu options, no changing call centres.
Switching without hassle
We cancel your old policy and align the start date, so you are never a day without cover.
Help with claims
We report the claim and monitor how it is handled. In urgent cases you can reach us on the emergency line.
9.5New policy
9.8Claims handling
Customers rate our service on four aspects: personal service, service delivery, availability and the outcome. The reviews are collected and published by NH1816 and come from customers who have actually taken out a policy with Finass Advies B.V. or reported a claim.
Where things go wrong in practice
Four points that make the difference between a policy that pays out and one that does not.
The loss lies in claims for non-material damage, not in downtime
If your system is down for a day, you reschedule appointments. If a record leaks, you face clients bringing claims for the invasion of their private life. With special categories of personal data that chance of a claim is real, and the number of people concerned is small but the loss per person high. The liability section of the policy and the cover for notification costs and support for victims matter more here than the business interruption cover that other sectors need.
Professional secrecy suddenly makes an ordinary way of working risky
Video consultations, video calling through a free service, notes in a shared cloud folder or a message exchange with a client: these are the places where data ends up outside the record system. Insurers ask about them, because they determine how many places can leak. Set out which channels you use and stick to them. What you state about this in the application falls under Article 7:928 of the Dutch Civil Code; if it is not correct, the insurer may reduce the payout under Article 7:930 DCC.
Disciplinary law and fines fall outside the cover
If a client lodges a complaint with the disciplinary tribunal after a breach, the policy can usually pay the legal assistance, but not the measure that follows: a reprimand or removal from the register is personal and not insurable. The same applies to an administrative fine from the Autoriteit Persoonsgegevens (the Dutch data protection authority). What does reach the policy is the forensic investigation, informing those concerned and the claims for compensation they bring against you.
A treatment error is not a cyber loss
If a client complains of a wrong diagnosis, treatment continued for too long or careless record-keeping, that is a professional error. It belongs with your professional indemnity insurance (BAV) and is excluded on the cyber policy. The cyber policy starts with a security incident: a mailbox broken into, ransomware, an export sent to the wrong address. Loss of a paper file without any digital element also falls outside the cover at many insurers; check that if you still work on paper.
Frequently asked questions
This is what people ask us most.
I only have a few hundred records. Is cyber insurance worth it?
For care providers the number of records is not the measure. With special categories of personal data the loss per person is high and the chance of claims greater than with a list of addresses. The immediate help after an incident is, moreover, the heart of the product: a reporting line, forensic investigation and guidance on reporting within 72 hours. You cannot organise that work yourself in the middle of a crisis.
Does the policy pay a claim for breach of my professional secrecy?
If the breach results from a security incident, such as a break-in or an export sent to the wrong address, the client's claim generally falls under the liability section. If you deliberately share information without a legal basis, that is not an incident but a choice, and Article 7:952 DCC excludes intent. The disciplinary consequences fall outside the policy in both cases.
What security does an insurer expect from a small practice?
Usually two-factor authentication on email and on the record system, up-to-date patching, encryption of laptops and back-ups that you have tested and that cannot be deleted from the working environment. For a practice without an IT department these are measures your software supplier usually offers already; they simply have to be demonstrably switched on at the moment you complete the application.
I use video calling. Does that change my risk?
Yes, on two points. First, there is the question of where that service keeps recordings, chat logs and appointment data and whether you have a data processing agreement about it. Second, it extends your attack surface with an account that is often less strictly secured than the record system. Include the channel expressly in the application, so that the cover extends to it.
Every situation is different. For these situations we have a separate page.
- Compare business cyber insuranceThe main page
- Cyber insurance for estate agentsClient data, transactions, fraud
- Cyber insurance for dental practicesPatient records, X-rays, downtime
- Cyber insurance for employment agenciesCandidate data, citizen service numbers, payroll processing
- Cyber insurance for civil-law notariesClient money, transactions, confidentiality
- Cyber insurance for solicitorsConfidentiality, case files, professional secrecy
- Cyber insurance for marketing agenciesClient accounts, advertising budget, data
- Cyber insurance for physiotherapistsPatient records, small practice, duty to report
- Cyber insurance for accountantsClient data, tax records, duty to report
Read more
Ready to compare?
Request a quote without obligation. We will look at which insurer best matches your activities and your risk.
Prefer to call? 072 - 509 24 56, weekdays 09:00–17:00.
Claim on the road? Emergency line 06 - 55 20 40 72.
About our service
Finass Verzekert is a trading name of Finass Advies B.V. We advise on and arrange non-life insurance on the basis of an objective analysis of several insurers, and receive commission for this from the insurer, which is included in the premium. You pay no separate advice fee. Before you take out cover, we establish your wishes and needs.
You will find our licence, KvK and Kifid details and our complaints procedure at the foot of every page.
This page was compiled by Finass Verzekert (LinkedIn). Last updated on .
The information on this page is general in nature and is not personal advice.