How much umbrella or excess liability does a medical device company need?

An umbrella (or excess) policy raises the effective limit over a device company's underlying general liability, products and completed operations, and auto coverage. For most device manufacturers the products exposure is the reason to buy it: a single injury claim from a device can exceed a primary products limit, and the umbrella is what stands behind it.

Typical starting points run $5M for a smaller, lower-risk manufacturer and $10M or more for higher-risk, implantable, or hospital-facing device makers. The controlling number is usually whatever the largest hospital, GPO, or distribution contract requires, combined with a realistic view of the device's severity.

A standard umbrella follows over general liability, products and completed operations, and commercial auto. It generally does not extend over professional or errors and omissions, directors and officers, or cyber unless it is specifically written to follow form over those lines. A device maker that assumes its umbrella tops up its E&O or cyber tower is usually mistaken, and that assumption is a common gap found at contract review.

For a connected-device or software company, this matters: the technology E&O and cyber limits are a separate tower and have to be sized on their own.

Device class and severity: a Class III or implantable device carries higher bodily-injury severity than a Class I accessory, and the umbrella should reflect that.

Hospital and GPO contracts: purchase agreements and group purchasing organization contracts frequently specify a required combined limit (commonly $5M to $10M or more) and additional-insured status. These contract requirements are the most common reason a growing device maker increases its umbrella.

Distribution scale and sales volume: broader distribution and higher unit volume raise the aggregate exposure. Geography matters too, since selling into more jurisdictions widens the liability picture.

The umbrella is not a substitute for a properly sized primary products and completed operations limit; it sits above it. The right structure is an adequate primary products limit that satisfies the base contract requirement, with the umbrella providing the excess capacity that hospital and GPO agreements or the device's severity call for. Reviewing each major contract's insurance schedule against the current primary-plus-umbrella tower before signing is what keeps a device maker compliant, because the combined-limit requirement is one of the most common places a company is found short at contract signing.