How does a typical sponsor MSA insurance schedule read?

Commercial General Liability: $1M per occurrence / $2M aggregate minimum, occurrence form (not claims-made). Most sponsor MSAs require occurrence because product claims surface years after manufacturing.

Products and Completed Operations: $5M-$10M aggregate baseline, primary. Oncology, biologics, sterile injectable, and controlled-substance manufacturing increasingly require $10M.

Professional Liability / E&O: $1M-$5M claims-made. Covers development services scope - failed batches from formulation error, missed analytical qualification, breached study protocol.

Workers Compensation: Statutory limits in the state of operation. Employers Liability $1M.

Cyber Liability: $3M-$10M with explicit HIPAA Business Associate scope, breach response, regulatory defense for HHS OCR.

Commercial Auto: $1M combined single limit. Covers any company-owned or leased vehicles.

Excess / Umbrella: $5M-$25M typical, sitting over CGL / Products / Auto / Employers Liability.

Additional Insured for Products and Completed Operations: CG 20 10 (ongoing operations) plus CG 20 37 (products and completed operations) are both required. CG 20 10 alone is the most common gap on CDMO and CRO COIs.

Primary and Non-Contributory: The contractor's coverage responds first, before any sponsor coverage. CG 20 01 or equivalent manuscript wording.

Waiver of Subrogation: The contractor's carrier waives any right to pursue the sponsor. CG 24 04 or blanket waiver.

30-Day Notice of Cancellation: Actual carrier endorsement requiring 30 days written notice to the sponsor before any cancellation or material modification. "Endeavor to provide" language is typically rejected.

Survival of insurance obligation typically runs 7 years post-termination of the MSA (matching the products liability claim tail). Some sponsors require 10 years.

Audit rights: many sponsor MSAs include the right to request the current COI and underlying endorsements at any time during the contract term and through the survival period.

Change-control trigger: increasingly, MSAs tie insurance compliance to change-control or audit gates - a non-compliant COI does not just risk first-claim exposure, it risks campaign-stop or sponsor-walk under the contract terms.

Dedicated product recall coverage - most schedules do not require it explicitly, but FDA-recall extensions on standard products policies are typically insufficient at scale.

Specific cyber sizing tied to data volume - most schedules require a dollar limit but do not require sizing to PHI or sponsor-confidential data volume.

EU Clinical Trials Regulation (CTR) compliance - clinical trial agreements with EU sites need explicit EU CTR scope. Many sponsor MSAs do not require this even when they should.