Insurance Requirements for UK Bookkeepers and Accountants

Affiliate disclosure: This article contains affiliate links. If you purchase through them, we may earn a commission at no extra cost to you.

Three Different Sets of Rules

If you work with other people’s money, even just their invoices and bank feeds, the insurance position is more complicated than for most small businesses. What the law requires, what your professional body requires, and what is simply sensible are three different things that overlap untidily.

This explains what each cover does, who genuinely needs it, what the regulatory position actually is, and the two pieces most practices underestimate: run-off and cyber.

Why This Profession Is Different

You hold sensitive personal and commercial data, you give advice clients act on financially, and when something goes wrong it often surfaces years later, long after the engagement ended.

That produces a framework operating on several levels at once: anti-money laundering supervision, professional body rules, client contract requirements, and commercial sense.

Legal Requirements Versus Professional Body Requirements

No general UK statute compels every bookkeeper or accountant to hold professional indemnity insurance.

If you hold a practising certificate from a recognised body, ICAEW, ACCA, ICAS, AAT, CIPFA and others, professional indemnity is almost certainly a condition of that certificate. Breaching it risks the certificate, which in practice is the same as being unable to work. The requirement is regulatory rather than statutory, and the effect is the same.

The Requirement People Miss: AML Supervision

This is the actual legal obligation, and it is not insurance.

Anyone providing accountancy or bookkeeping services by way of business in the UK must be supervised for anti-money laundering purposes, either by a professional body supervisor or by HMRC as the default supervisor. Trading without supervision is a criminal offence, not a paperwork oversight, and HMRC charges registration fees and applies fit and proper checks where they apply.

Supervision brings duties that shape your risk profile and therefore your insurance: a written practice-wide risk assessment, policies and controls, customer due diligence on every client, a nominated officer, suspicious activity reports to the National Crime Agency, and record keeping for five years from the end of the relationship or the transaction.

If you are not a member of a professional body, HMRC supervision is your route, and it does not itself mandate professional indemnity insurance. Some umbrella supervision arrangements and trade associations do, so check what yours says.

Professional Indemnity

What It Covers

Claims that your work was negligent, contained errors or caused financial loss, plus defence costs. In this profession that typically means:

• An error in a return producing an HMRC penalty for the client
• Payroll miscalculations leading to underpayments
• VAT treatment advice that proves wrong
• A missed filing deadline

How Much

Each body sets its own minimum and reviews it periodically. We have deliberately not quoted figures, because they change and because a great many broker pages carry stale numbers. Check directly with your own body before arranging or renewing, and look for the additional requirements they often impose: whether the policy must be written on a claims-made basis, and what run-off they expect afterwards.

Beyond the minimum, size the cover against the work. A bookkeeper handling sole trader accounts carries a very different exposure from someone advising on acquisitions or complex VAT.

If You Are Not Regulated

No body means no mandated professional indemnity, and two things still make it effectively essential. Clients increasingly require it contractually, particularly limited companies and anyone referred by a regulated firm. And the exposure is real whether or not anyone is policing it.

Run-Off: The Piece Most People Underestimate

Professional indemnity is written on a claims-made basis. The policy in force when the claim arrives responds, not the one in force when you did the work.

Stop practising, let cover lapse, and a claim three years later about work you did before retiring lands on you personally.

Run-off cover continues protection after you cease practising, for work done while you were in business. It is usually cheaper than active cover, and it is not free, so it belongs in retirement planning rather than coming as a surprise.

How Long the Exposure Actually Runs

For professional negligence in England and Wales, the limitation period is generally six years from when the cause of action accrued, or three years from when the claimant knew or ought to have known about the problem, with a long-stop of fifteen years from the negligent act.

Here is the point worth absorbing: your professional body’s mandated run-off period may be shorter than that exposure window. Meeting the regulatory minimum is not the same as being covered for as long as a claim could be brought. Ask your broker what the longer option costs before deciding.

Retroactive Dates

The other half of the same mechanic. A new policy only covers work done after its retroactive date, so when switching insurer, ask for the existing date to be matched or for full prior acts cover. A cheaper premium that resets the date leaves your back catalogue uninsured.

Cyber Cover

You hold some of the most sensitive data there is: tax records, payroll, bank details, and client records that now live in cloud accounting platforms.

A ransomware attack or breach in a small practice triggers UK GDPR obligations, including notifying the ICO within 72 hours where there is a risk to people’s rights, plus investigation, client notification, data restoration and potentially claims. Professional indemnity does not cover that process, and standard business policies exclude cyber events.

Cyber cover typically pays for forensic investigation, breach response and legal support, business interruption while systems are down, data recovery, and notification costs. One clarification worth making, because it is widely misstated: cyber policies generally do not pay regulatory fines. Most exclude them and their insurability in the UK is contested. What you are buying is the cost of responding, which for a small practice is usually the bigger number anyway.

Making Tax Digital Has Changed the Exposure

Not just more data online. MTD for Income Tax has applied since April 2026 to sole traders and landlords with qualifying income above £50,000, dropping to £30,000 in April 2027 and £20,000 in April 2028.

For an agent, that converts an annual filing cycle into four quarterly updates plus a Final Declaration per affected client. More filing points means more deadlines to miss and more opportunities for an error to be repeated across a year before anyone notices, which is a professional indemnity question as much as a workload one.

One related practice point: agents should work through agent services accounts rather than logging in as clients using their credentials. Holding client Government Gateway details is both a professional standards problem and a concentration of exactly the data a cyber attack is after.

Public Liability

Injury or property damage to third parties: a client tripping over a cable, damage caused during a visit to their premises.

Low exposure if you work remotely and never meet clients. Reasonable if you visit client sites or have people in your office. Not mandated by the accountancy bodies, usually inexpensive, and commonly bundled.

Employers’ Liability

Compulsory from your first employee, including part-time staff, under the Employers’ Liability (Compulsory Insurance) Act 1969.

• Minimum £5 million, most policies issued at £10 million
• The insurer must be FCA and PRA authorised
• Penalties reach £2,500 for each day uninsured and up to £1,000 for failing to display or produce the certificate

Narrow exemptions exist for an unincorporated business whose employees are all close relatives, and for a company whose only employee owns at least half the shares.

Subcontractors complicate it. Status turns on the working relationship rather than the label, and someone working under your direction using your systems may be treated as employed for insurance purposes whatever the contract says.

If You Hold Client Money

Bodies that permit it impose client money rules: segregated accounts, reconciliation, and reporting. Check whether yours also expects fidelity cover against misappropriation by staff, since that is a different policy from professional indemnity and is not usually included in it.

FAQ

Do I need professional indemnity if I am a bookkeeper rather than an accountant?

If you hold a practising licence through AAT or another body, almost certainly, as a condition of the licence. Independently, it is not required by law, and most clients will expect it and the downside of going without is severe.

How much cover do I need?

Check your body’s current minimum directly, then size above it according to the complexity and value of the work you do. Published figures on broker sites go stale quickly.

What is the difference between claims-made and occurrence cover?

Claims-made responds to claims made during the policy period whenever the work was done. Occurrence responds to events during the policy period whenever the claim arrives. Accountancy professional indemnity is almost always claims-made, which is precisely why run-off matters.

Does my obligation change when I stop practising?

Usually. The duty to hold active cover ends with the certificate, and the duty to maintain run-off begins. Confirm the required period with your body, and consider whether to buy longer than the minimum given the limitation position.

Do I need insurance to satisfy AML supervision?

Supervision and insurance are separate. Supervision is a legal requirement and operating without it is a criminal offence. Professional indemnity is required by professional bodies rather than by the money laundering rules, though some supervision arrangements impose it.

Insurance for Bookkeepers and Accountants: The Bottom Line

If you hold a practising certificate, professional indemnity is a condition of working. Get the current minimum from your body rather than from a comparison site, and check whether they also specify the basis of cover and the run-off period.

If you are unregulated, confirm your AML supervision first, because that is the legal obligation, then treat professional indemnity as commercially unavoidable.

Whatever your status, two things deserve more attention than they usually get. Run-off, because the mandated period can be shorter than the window in which a claim can arrive. And cyber, because quarterly MTD filing has moved more client data into more systems with more deadlines attached.

Use a broker who knows the accountancy sector, cross-check against your body’s current rules, and review the cover whenever the practice or the client base changes shape.

This article is general information about insurance and UK regulation, not advice, and it does not take account of your circumstances. Professional body requirements, AML rules and policy wordings change. Confirm current requirements with your own supervisory body and speak to an FCA-authorised broker before relying on anything here.