AI Exclusions Are Spreading in Canadian Business Insurance

Something important is happening in Canadian business insurance that most SMBs haven't noticed yet: carriers are quietly adding AI exclusions to standard policies. If your business renewed its GL, D&O, or E&O in the last 18 months, there's a growing chance the new policy contains language that specifically denies coverage for AI-related claims.

What's Changing — and Why

The insurance industry operates on data. It needs historical loss information to price risk accurately. AI risk — prompt injection, hallucination liability, algorithmic bias, autonomous agent errors — has no meaningful loss history. It's too new. And the potential severity is unquantified.

Carriers respond to unquantified risk in two ways: charge a lot for it, or exclude it entirely. Most are choosing exclusion.

The mechanism: ISO endorsement forms CG 40 47 (Artificial Intelligence Exclusion) and CG 40 48 (AI Data and Analytics Exclusion) are being adopted by carriers writing Canadian commercial business. These forms provide standardized language to exclude AI-related liabilities from general liability, professional liability, and management liability policies.

Which Policies Are Affected

General Liability (GL/CGL)

The primary target. GL policies were never designed to cover AI outputs, but the broad language of older policies could sometimes be interpreted to cover AI-related bodily injury or property damage. New exclusions close that door permanently.

Directors & Officers (D&O)

AI governance failures — inadequate oversight of AI systems, failure to implement AI policies — can trigger D&O claims. Carriers are adding AI-specific exclusions to limit exposure to board-level AI liability.

Errors & Omissions (E&O)

If your business provides professional advice or services, and AI tools are involved in producing that advice, E&O policies with AI exclusions won't respond to related claims.

Cyber Insurance

Even dedicated cyber policies are being updated. Some carriers are adding sub-limits for AI-related incidents rather than excluding them entirely, but the coverage is often inadequate for the actual exposure.

The Canadian Regulatory Vacuum

Canada's Bill C-27, which included the Artificial Intelligence and Data Act (AIDA), has been stalled indefinitely in Parliament. This creates a unique situation:

• No mandatory AI insurance requirements exist in Canada
• No AI-specific liability framework governs business use of AI
• PIPEDA applies to personal data handled by AI but doesn't address AI liability specifically
• Provincial regulators haven't issued AI insurance guidance

This vacuum won't last. The EU AI Act (effective August 2026) imposes strict liability and insurance requirements for AI systems. Canadian legislation will eventually follow. But right now, Canadian businesses face AI risk without regulatory protection or insurance coverage.

What This Means for Canadian SMEs

The practical impact is straightforward: if your business uses any AI tool — and that includes ChatGPT, Microsoft Copilot, Google Gemini, or any AI-powered feature in software you already use — you may have a coverage gap.

Consider these scenarios:

• A marketing agency uses ChatGPT to write client copy. The output contains plagiarized material. The client sues for copyright infringement. E&O policy: denied (AI-generated content exclusion).
• An accounting firm uses AI to analyze client data. The AI produces incorrect tax advice. The client suffers a financial loss. E&O policy: denied (algorithmic output exclusion).
• A retailer uses AI-powered hiring software. The system discriminates against candidates. Human rights complaints follow. GL policy: denied (AI decision-making exclusion).

What to Do About It

The solution isn't to stop using AI — that's not realistic. The solution is to understand your gap and fill it.

1. Read your policy. Search for "AI," "artificial intelligence," "algorithm," "automated," and "generative" in the exclusions section.
2. Use the gap analyzer. Our free tool checks your policy against 11 common exclusion patterns in under 60 seconds.
3. Ask your broker. Specifically: "Does my policy cover losses caused by AI tools we use in our business?" Get the answer in writing.
4. Consider an AI-specific wrap. Products like CyberAgency AI Shield are designed to sit above your existing policies and cover the AI exclusion gap specifically.

The exclusion wave is accelerating. Every renewal cycle brings more carriers adding AI language. The businesses that address this now will be protected when the inevitable claims start landing.