Five liability risks every Cypriot SME overlooks

Most Cypriot SMEs we meet are insured but that doesn't mean they're covered. There's a difference between holding a policy and having the right policy, and the gap tends to appear at the worst possible moment: the day a claim is made.

Over the last decade advising businesses across the Famagusta district, five liability risks have come up again and again. They're the ones owners tend to assume are covered but often aren't, or aren't covered to a level that would actually protect the business if the worst happened.

If you own or run an SME in Cyprus, this list is worth twenty minutes of your attention.

1. Slips, trips and public liability

This is the oldest risk in the book and still one of the most commonly underinsured. A customer slips on a wet floor. A delivery driver trips on an uneven step. A passer-by is injured when a sign falls from your premises. In every case, the claim lands on you.

What surprises most owners isn't the frequency of these claims it's the size of the settlements. Cypriot courts can award significant compensation for injuries that affect a person's ability to work, and legal defence costs alone can run into five figures before any settlement is reached.

Where SMEs go wrong:

• Cover set at the statutory minimum, not at a level that reflects the actual risk of the business
• Public liability not extended to include contractor and sub-contractor activities on site
• Events, pop-ups and off-premises activities left uncovered
• Age or condition of premises not disclosed at renewal

A €500,000 public liability limit that was fine for a small retail unit ten years ago may be entirely inadequate for a busy hospitality venue today.

If your business has grown since your policy was arranged, or if your premises see significant foot traffic, it's worth checking what your liability limit actually represents in today's market.

2. Employer's liability the legal minimum, ignored

Employer's liability insurance is a legal requirement for most businesses with staff in Cyprus. It covers claims from employees who are injured or become ill because of their work and it's not optional.

Where SMEs get caught out is in the details:

• Part-time and casual staff often assumed to be outside the policy. They aren't.
• Sub-contractors and labour-only contractors may be treated as employees in a claim, even if they're paid as self-employed.
• Volunteers and interns often not covered unless explicitly added.
• Off-site work staff working at client premises, on the road or abroad need specific extensions.
• Work-related stress and occupational illness increasingly the subject of claims, and often excluded.

If you employ anyone in any capacity, this cover isn't a nice-to-have. It's the difference between a business that survives a serious workplace injury and one that doesn't.

3. Professional advice that goes wrong

If your business gives advice, provides a service, or makes recommendations that clients rely on, you carry professional risk whether you think of yourself as a "professional" or not.

That includes:

• Accountants, lawyers, consultants and architects
• Designers, developers and IT service providers
• Estate agents, brokers and financial advisors
• Marketing and PR agencies
• Any business that gives written recommendations as part of its work

Professional indemnity claims don't require malice or gross negligence. An honest mistake, an oversight, or a miscommunication that leads to a client's financial loss is enough. And the legal costs of defending such a claim can exceed the claim itself.

Where SMEs fall short:

• Assuming "we don't give advice, we just do the work" a common misconception
• Professional indemnity not held at all for freelancers and sole traders
• Cover arranged years ago at a level that no longer reflects the scale of contracts now being signed
• Retroactive cover not in place when moving to a new insurer

4. Cyber incidents the newest and least understood

This is the risk that has changed most in the last five years and the one SME owners still underestimate most consistently.

The stereotype of cyber attacks as targeting large corporations is wrong. The reality is the opposite: SMEs are attractive targets precisely because they hold valuable data (client records, supplier contracts, payment details) with fewer defences than a bank or a utility company.

A single incident can trigger multiple liabilities at once:

• Data protection liability under GDPR, businesses that lose personal data can face regulatory fines and claims from affected individuals
• Breach notification costs informing affected parties, arranging credit monitoring, engaging forensic experts
• Business interruption systems locked by ransomware, phones down, orders not processing
• Ransom payments even where insurers discourage them, some policies include cover
• Reputational damage and loss of clients often the largest cost of all

Cyber cover is no longer a niche product. For most SMEs handling client data, it's become as essential as public liability. Yet we still find businesses without it often because the owner assumes it's either unnecessary or prohibitively expensive.

5. Contractual liability you've unknowingly accepted

This is the one that catches experienced business owners most often because it doesn't come from your insurance, it comes from your contracts.

When you sign a client agreement, a supplier contract, or a tender submission, you accept terms. And some of those terms may include liability transfer where the other party requires you to accept responsibility for risks that would normally sit with them.

Common examples:

• Indemnity clauses that require you to cover the client against their own losses
• Requirements to maintain insurance at specific minimum limits (which your existing policy may not meet)
• Waivers of liability that don't apply in your direction
• Extended warranty or rectification obligations beyond your usual scope of work

If you've accepted a contract with an unlimited indemnity clause, your insurance policy may not respond to the resulting claim because most policies exclude contractual liability that goes beyond normal business risk.

Where SMEs go wrong:

• Signing contracts without legal review, assuming standard terms apply
• Not notifying the insurer of contractual obligations that could increase risk
• Accepting contract terms that exceed the liability limit on the policy
• Assuming "we've always signed similar contracts" means nothing has changed

The common thread

Each of these five risks follows the same pattern. They're not exotic. They're not new. They're the everyday exposures that every business faces but which tend to be assumed covered until the day they're not.

The solution isn't more insurance. It's right-sized insurance arranged against an honest assessment of your actual exposure, reviewed regularly as the business evolves, and structured with the specifics of your industry in mind.

If you'd like to talk through what that looks like for your business, get in touch. The consultation is free, and we'll tell you plainly what we think you need and what you don't.