Professional Indemnity Insurance for UK Web Designers: A Straight-Talking Guide

This article contains affiliate links. If you purchase through a link on this site, we may earn a commission at no extra cost to you.

The Email That Starts This

You land a commercial client, and then: “Please confirm your professional indemnity cover before we proceed.”

This explains what professional indemnity actually covers for web work, what claims look like in practice, the mechanic that catches freelancers out when they stop trading, and the two exposures specific to this trade that most guides skim: licensing of assets and accessibility.

What It Covers

Professional indemnity responds when a client claims your advice or work caused them financial loss, paying defence costs and any compensation up to your limit.

For web designers, professional work means all of it: discovery, wireframes, the build, the code, integrations, and the technical advice you give along the way.

Is It Required by Law?

No. Unlike employers’ liability, which is compulsory the moment you employ someone, professional indemnity is not mandated. Commercial and public sector contracts require it instead, which amounts to the same thing in practice.

What Contracts Ask For

Most UK web contracts cluster at £1 million or £2 million, with £5 million appearing in financial services, healthcare and central government procurement.

Read whether the figure is per claim or in the aggregate. A contract requiring £1 million per claim is not satisfied by a policy with £1 million in the aggregate across the year, and that distinction is where contract compliance quietly fails.

Keep copies of contracts that specify a level. Brokers ask for them, and they are useful evidence that you bought the right cover for a reason.

What Claims Look Like

A Launch That Fails

You deliver an e-commerce build on time, the client drives paid traffic at it, and checkout collapses under load. Lost sales and wasted ad spend are both quantifiable, and the claim says you should have load tested or advised differently.

A Deadline That Costs Money

A booking system lands late, the client misses their seasonal peak, and the loss is measurable against last year’s figures. Good reasons for the delay do not remove the claim; they inform the defence.

Accessibility

This one is more legally specific than most guides admit, and the distinction matters.

Public sector clients are under a hard legal duty. The Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018 require their sites and apps to meet the accessibility standard, currently WCAG 2.2 AA via the EN 301 549 standard, and to publish an accessibility statement. If you build for a council, an NHS trust or a university and the result does not meet it, their remediation cost has an obvious author.

Private sector clients are not bound by those regulations. They are bound by the Equality Act 2010 duty to make reasonable adjustments, which does not name a technical standard but is increasingly measured against one.

If the client sells into the EU, the European Accessibility Act has applied since June 2025 to a range of consumer-facing services including e-commerce, which may impose requirements beyond anything UK law demands.

The practical point for your own protection: put the accessibility standard you are building to in the scope, in writing, along with what is out of scope. Most accessibility claims start as a disagreement about what was agreed.

Data Protection

If you integrate forms, analytics, cookies or third-party tools badly and the client ends up in difficulty with the ICO, they may say your build caused it.

Worth knowing where you sit legally. If you host, maintain or otherwise handle personal data on the client’s behalf, you are a processor, and the client is required to have a written Article 28 contract with you setting out the terms. Plenty of web designers process client data for years without one. Having it clarifies responsibility and is a document you want in a dispute.

Unlicensed Assets

The most underrated exposure in this trade.

Stock images from doubtful sources, fonts from unofficial downloads, icons lifted from a search result. If infringing assets end up on the client’s site, the rights holder pursues the client, and the client pursues you.

Fonts are the usual culprit. A desktop licence is frequently not a web embedding licence, and using one on a client site can be a separate breach. Reverse image search and automated monitoring have made enforcement routine rather than theoretical.

Professional indemnity can cover IP infringement claims, though cover is not guaranteed where the insurer concludes you acted knowingly or recklessly. Buy proper licences, keep the receipts, and list asset provenance in your handover documentation. That last habit converts an argument into a document.

The Claims-Made Mechanic

Professional indemnity is written on a claims-made basis: the policy that responds is the one in force when the claim is made, not the one in force when you did the work.

Finish a project in January, cancel the policy in March when you go in-house, and a claim in June has nothing to respond to.

Run-Off Cover

Run-off keeps you covered for past work after you stop trading or no longer need live cover. If you are going permanent, winding down or being absorbed into another business, it is the thing to arrange before you cancel rather than after.

Six years is the usual baseline, matching the limitation period for simple contract claims in England and Wales. Two refinements: if any client contract was executed as a deed, the limitation period is twelve years, and claims for latent problems can run three years from the date the client knew about them.

Retroactive Date

The other half of the same idea. A new policy only covers work done after its retroactive date, so when you switch insurer, push for a date that reaches back to when you started trading, or full prior acts cover if it is offered. A cheaper premium with a fresh retroactive date is not cheaper.

Where Cyber Insurance Fits

Web designers sit in an awkward middle: not a security business, but holding credentials, hosting access, databases and sometimes payment integrations.

If your systems are compromised, or malicious code reaches a site you maintain, cyber insurance is the policy built for it, covering forensic investigation, breach response, customer notification and the specialist help you will want in the first 24 hours.

One correction worth making, because it appears in a lot of guides: cyber policies do not generally pay regulatory fines. Most exclude them, and whether a UK data protection fine can lawfully be insured at all is contested. What cyber cover buys is the cost of responding, which is usually the larger number for a small business anyway.

Professional indemnity answers claims that your work caused loss. Cyber answers the costs of a breach. Depending on how a claim is framed, both may be in play, which is why some insurers sell them together.

Reduce the Exposure in Your Contract

Insurance is the backstop. Your own terms are the first line.

A limitation of liability clause capping your liability at the fees paid, and excluding indirect and consequential loss such as lost profits, materially changes what a claim can be worth. Those clauses are subject to a reasonableness test, so they are not unlimited protection, and a cap of some kind is far better than none.

Alongside that: define the scope and what is out of it, state the accessibility standard, specify who is responsible for hosting and maintenance after handover, and agree who provides and licenses content and assets.

What to Check When Comparing Policies

• Retroactive date, as far back as possible or full prior acts
• Run-off provisions, whether offered and at what cost
• IP infringement, explicitly included rather than assumed
• Regulatory defence costs, which some policies fund and others do not
• Jurisdiction, UK, EU or worldwide, noting that United States and Canada cover usually costs more
• Per claim versus aggregate limits, matched to what your contracts require
• Subcontractors, whether work done by contractors under your direction is covered
• Notification, which almost always has to happen before you instruct anyone or admit anything

FAQ

Do I need it as a freelancer?

Not legally. In practice, most commercial clients will not sign without it, and as a sole trader there is no company between a claim and your own finances.

How much cover?

£1 million is a sensible starting point for freelancers and small studios, moving to £2 million when contracts require it. Let the contracts decide rather than guessing.

Does it cover my subcontractors?

Sometimes. Check the wording, and require subcontractors to carry their own cover regardless.

A client is claiming about a project from three years ago. Am I covered?

If you still have a live policy and its retroactive date reaches back to the work, yes. If you cancelled, only run-off cover helps. This is the scenario run-off exists for.

Do I need public liability too?

If you visit client offices, work from co-working space or attend events, it is worth having, and some contracts ask for it alongside professional indemnity. If you employ anyone, employers’ liability is compulsory.

Professional Indemnity for Web Designers: The Bottom Line

Get cover in place before signing the contract, at the limit the contract specifies, and check whether that limit is per claim or aggregate.

Confirm that IP infringement is included, because unlicensed fonts and images are the likeliest claim you will ever face, and keep your licences and asset provenance where you can find them.

Understand the claims-made mechanic. The policy that matters is the one live when the claim arrives, which makes run-off cover the thing to sort before you stop paying premiums rather than after.

And tighten your own contract while you are at it. A liability cap, a defined scope and a stated accessibility standard will prevent more claims than any policy will pay.

This article is general information about insurance and UK law, not advice, and it does not take account of your circumstances. Policy wordings, accessibility standards and regulatory requirements change. Speak to an FCA-authorised broker, and take legal advice on your contract terms, before relying on anything here.