Insurance Litigation 2026

Last Updated October 01, 2026

France

Law and Practice

Authors



Signature Litigation AARPI is a leading independent law firm specialising in high-value commercial litigation, international arbitration and investigations, headquartered in London with offices in Paris, Frankfurt and Gibraltar. The firm’s insurance and reinsurance disputes practice focuses on complex international insurance disputes, with a Paris team comprising one partner, two senior associates and one associate. The team acts for multinational companies and major global insurers and reinsurers across the full spectrum of insurance law, including liability, property damage, special risks, environmental liability, and financial lines. The practice excels in high-value, multi-party, multi-jurisdictional disputes involving master structure policies and captives, with significant experience in policy wording and coverage disputes across sectors including automotive, chemical, construction, energy, financial services, life sciences and telecommunications. The team also handles disputes arising out of natural disasters, major environmental incidents and global epidemics, and has established expertise in claims management, expert appraisal proceedings and industrial risk investigations.

Coverage interpretation and ambiguity in policy wording are by far the most common triggers of insurance disputes in France, cutting across all lines of business. Property damage, product liability, and financial lines (D&O, cyber, and fraud) consistently generate the highest volumes of contentious matters. In practice, the real question is almost always whether a loss is covered, and things become significantly more complicated when multi-layered programmes involve master policies, local policies and captives. Claims handling issues, including late notification and compliance with policy conditions, also remain a steady consistent of litigation.

The landscape has shifted over the past few years. Cyber-insurance is now a genuine hotspot, driven by disputes over ransomware coverage and whether war exclusions apply to state-sponsored cyber-attacks. ESG and climate-related claims are on the rise, especially in D&O and professional indemnity, as directors face increasing scrutiny over environmental commitments. Construction and environmental liability continue to produce some of the most technically complex disputes, including cases arising from industrial fires involving lithium battery storage.

Drafting quality matters enormously in France and can be a significant source of insurance disputes. French courts take a strict approach to exclusion clauses, which must be clear, precise and limited in scope. Vague or overly broad exclusions may therefore be set aside, particularly where they effectively deprive the policy of its substance.

Some areas regularly give rise to disputes. The definition of the insured event is a recurring issue, notably in long-tail liability and serial loss cases. Notification and claims conditions can also be contentious, as can aggregation clauses where a single event or series of events results in significant losses. The distinction between conditions of cover and exclusions is another frequent source of litigation, as it can determine whether an insurer is entitled to deny cover.

Cross-border insurance programmes add a further layer of complexity. Master policy wordings, often based on English-law drafting conventions, must be reconciled with French mandatory rules.

In practice, a large number of insurance disputes in France are resolved through negotiation, particularly where the parties have a common interest in controlling costs and preserving their commercial relationship. This process is often supported by a jointly instructed loss adjuster or expert to assess and quantify the claim. Mediation is also gaining ground, especially in cross-border matters.

A distinctive feature of the French system is the role of court-ordered expert appraisal proceedings. In complex construction, industrial risk or product liability disputes, a court may appoint a judicial expert to investigate causation and assess the loss before the merits are determined. These proceedings can take months, and sometimes several years in complex cases, but they often help narrow the issues and ultimately facilitate settlement.

Where litigation is unavoidable, proceedings will generally take place before the civil or commercial courts. This can involve significant legal and expert costs, particularly in complex cases. Arbitration is more common in reinsurance disputes and large international programmes, with Paris being a well-established seat.

In France, the governing law of an insurance contract is primarily determined by the applicable European rules on contractual choice of law. In principle, the parties may choose the law governing the contract, but this freedom is not unlimited. Insurance contracts are subject to specific rules designed to protect policyholders, particularly where the insured is a consumer or a smaller business.

In commercial insurance, parties generally have greater flexibility to agree on the applicable law, especially where the risks and parties are international. The reality is that the extent of negotiation depends significantly on the size and sophistication of the insured. Large corporate insureds, particularly in international programmes, will generally have greater bargaining power, with brokers and legal advisers often involved in negotiating the wording. For SMEs, the applicable law is more likely to reflect the insurer’s standard policy wording.

French mandatory rules may still apply regardless of the law chosen, particularly where the risk is closely connected with France.

Jurisdiction clauses in insurance contracts are subject to specific rules under both French domestic law and EU law. Under the Brussels I bis Regulation, jurisdiction clauses in insurance matters are only enforceable under limited circumstances, notably after the dispute has arisen, or where the policyholder is the one invoking the clause. This protective regime does not apply, however, to large risks, where jurisdiction clauses are generally upheld and given full effect.

Under French domestic law, jurisdiction clauses in commercial insurance contracts between professionals are generally valid. The key issue is therefore often not whether a clause exists, but whether it has been properly incorporated into the relevant policy and whether it is consistent with the structure of the insurance programme.

In cross-border insurance disputes, jurisdiction and choice of law are mainly governed by European rules, in particular the Brussels I bis and Rome I Regulations, together with the specific rules applying to insurance contracts. The first practical question is usually where proceedings should be brought. This can be difficult where the policy contains a jurisdiction clause, as the rules protecting policyholders may limit its effect.

Choice of law raises similar issues. Even where the parties have expressly chosen a governing law, mandatory rules of another country may still apply, particularly where the insured risk has a strong connection with that country. As a result, the same policy wording may potentially be interpreted differently depending on the court hearing the dispute.

The most difficult cases are often those involving international insurance programmes. A master policy, local policies, fronting arrangements and reinsurance contracts may each be subject to different laws and jurisdiction clauses. This can result in parallel proceedings or, at the very least, lengthy disputes over which court has jurisdiction to hear the case.

French courts generally give effect to valid and applicable exclusive jurisdiction and arbitration clauses, particularly in international commercial disputes. Where a dispute falls within the scope of an arbitration agreement, French courts are generally reluctant to interfere with the arbitral process and will normally decline jurisdiction, subject to the limited circumstances provided by French arbitration law.

The position is particularly strong in favour of arbitration. French courts have traditionally adopted a pro-arbitration approach, and the existence of parallel proceedings before a foreign court will not necessarily prevent an arbitration seated in France from proceeding.

This is still very much an emerging area in France, and there is no significant body of case law specifically addressing jurisdiction and choice of law in insurance disputes involving AI systems.

That said, courts are increasingly likely to have to deal with the fact that AI systems rarely fit neatly within a single jurisdiction. Liability may arise from the developer, the operator or the user, while the system itself may rely on data, infrastructure and suppliers located in several countries, making both jurisdiction and applicable law more difficult to determine.

In Europe, the existing framework remains the starting point, but it was not designed specifically for AI-related disputes. Courts are therefore likely to focus on the location of the relevant conduct, the place where the damage occurred and the contractual relationships between the different actors.

From an insurance perspective, this creates a particular challenge because the same AI-related event may trigger several policies across different jurisdictions. Cyber, professional liability, product liability and technology policies may all potentially respond, with different governing laws and jurisdiction clauses.

French law is firmly pro-arbitration. Arbitration clauses in insurance and reinsurance contracts are generally recognised and enforced, provided the parties have the capacity to enter into them. Under French law, arbitration clauses are valid in contracts entered into in the course of a professional activity, which covers the vast majority of commercial and industrial insurance contracts.

French courts also apply the principle of compétence-compétence. Where a valid arbitration clause exists, the court will generally decline jurisdiction unless the arbitration agreement is manifestly null or inapplicable. The arbitral tribunal is therefore primarily responsible for ruling on its own jurisdiction.

The position is particularly straightforward in reinsurance, where arbitration clauses are standard and rarely challenged

The main limitations arise in consumer insurance, where the policyholder has not contracted in the course of a professional activity and arbitration clauses may not be enforceable. Overall, arbitration is well established in the French insurance market, particularly for sophisticated commercial parties, and French courts are generally supportive of its use in international disputes.

France is one of the most enforcement-friendly jurisdictions in the world for arbitral awards. Both domestic and international awards can be enforced through an exequatur procedure before the French courts, with the Paris Judicial Court having jurisdiction over international awards.

The grounds for refusing enforcement are narrowly defined and rarely applied. For international awards, French courts apply the limited grounds set out in the Code of Civil Procedure, including lack of jurisdiction, due process violations and breaches of international public policy. Importantly, French courts do not review the merits of the award.

Awards rendered abroad are also enforceable under the New York Convention, to which France is a party, and French courts have a strong track record of granting exequatur. Practical barriers to enforcement are therefore generally limited. France has even granted exequatur to arbitral awards that had been annulled by the courts of the seat.

Arbitration is widely used in reinsurance disputes in France. It is the default dispute resolution mechanism in most treaty and facultative reinsurance contracts. In direct insurance, arbitration is less systematic but increasingly common in large commercial programmes, particularly those involving international parties or cross-border risks. Financial lines, energy, construction and infrastructure are the sectors where arbitration clauses appear most frequently.

The main advantages cited by practitioners are confidentiality, which is especially valued by insurers and reinsurers wishing to avoid public proceedings, the ability to appoint arbitrators with insurance expertise, and flexibility in procedure. Arbitration is also increasingly used in disputes raising specific insurance questions, such as W&I insurance disputes arising in the context of M&A transactions, where the speed, confidentiality and technical expertise of arbitrators are particularly valued.

As regards challenge and appeal, the scope is deliberately narrow under French law: international awards can only be set aside on the limited grounds set out in the Code of Civil Procedure for international awards, and on similarly restricted grounds for domestic awards.

One of the main trends in France is the increasing complexity of coverage disputes, particularly where new risks do not fit neatly within traditional policy wordings. Cyber-risks and, increasingly, AI-related risks are good examples, as it can be difficult to determine which policy should respond and whether existing exclusions were drafted to address these risks.

An interesting development is the changing role of insurers in this area. Insurers are no longer simply stepping in after a loss has occurred. In cyber-insurance in particular, they increasingly seek to prevent or limit losses by requiring insureds to implement specific security measures before providing cover, and sometimes by making continued coverage conditional on maintaining those measures. This approach could become increasingly relevant for AI-related risks as well.

Environmental liability and product liability also remain important areas, particularly where losses develop over time or involve complex international supply chains.

These developments are pushing insurers towards more detailed wordings and stronger risk-management requirements, while insureds are increasingly focused on avoiding gaps in coverage and understanding the practical conditions attached to their policies.

French courts generally take a strict approach to policy wording, particularly when interpreting exclusions. Exclusion clauses must be formal and limited in scope, and courts will not hesitate to disregard an exclusion that is too broad or ambiguous. The underlying principle is that an exclusion should not effectively deprive the policy of the coverage that was agreed.

Ambiguity can therefore work against the insurer, particularly where the wording has been drafted by the insurer and is open to more than one reasonable interpretation. Courts will look at the policy as a whole rather than considering individual provisions in isolation, which can be important where the insuring clause, exclusions and definitions interact.

Endorsements can raise similar issues. Where an endorsement modifies or restricts the original wording, courts will generally look carefully at its precise terms and how it interacts with the rest of the policy. Inconsistencies between the main policy and an endorsement can therefore become a source of dispute.

Digital risks do not fit neatly within traditional insurance categories, and this is generating a growing number of coverage disputes. Key areas of contention include the scope of standalone cyber policies, the application of war and terrorism exclusions to state-sponsored attacks, and “silent cyber” exposure under traditional property and liability policies.

Technology failures, including cloud service outages causing business interruption, are also generating disputes, particularly around the trigger of cover, causation and the quantification of intangible losses. Systemic events create an additional challenge: a single software vulnerability or co-ordinated cyber-attack may affect multiple policyholders simultaneously, raising difficult questions around aggregation and policy limits.

Insurers are responding by tightening policy wordings, introducing specific sub-limits and exclusions for cyber-events, and requiring minimum cybersecurity standards as conditions of cover. This reflects a broader shift in the role of the insurer. Rather than simply indemnifying losses after an incident, insurers are increasingly seeking to influence how risks are managed before they materialise.

The market is still adapting, and coverage gaps remain a significant source of friction, particularly as AI and increasingly interconnected technologies create new forms of liability that existing policies were not necessarily designed to address.

Large-scale losses involving multiple insureds, products or locations inevitably raise the question of aggregation. The central question is often whether several losses should be treated as one occurrence, triggering a single policy limit, or as separate occurrences, potentially allowing the insured to recover under several limits.

This issue is particularly challenging in product liability, cyber- and systemic events. A common defect affecting thousands of products, a single software vulnerability or a widespread cyber-attack may generate numerous claims, but the policy may not clearly indicate whether they should be aggregated. The wording of the occurrence clause, and the connection between the individual losses and the underlying cause, therefore becomes critical.

These disputes can have a major financial impact. For insurers, broad aggregation can significantly limit their exposure and provide greater certainty when pricing systemic risks. Courts therefore tend to focus closely on the wording of the policy and the factual connection between the losses.

Sanctions regimes, particularly those imposed by the EU and, indirectly, the USA through the Office of Financial Assets Control (OFAC), have a tangible impact on coverage disputes in France. Insurers therefore have to consider both sides of the issue. Payment of a claim involving a sanctioned entity may create regulatory exposure, while refusing payment may give rise to a coverage dispute.

French insurance contracts increasingly contain sanctions limitation clauses, under which the insurer may suspend or refuse payment where doing so would breach applicable sanctions. The enforceability and precise scope of these clauses remain relatively untested by French courts, but they are becoming common market practice.

Illegality and public policy can raise similar issues. French courts generally distinguish between the legality of the insured’s conduct and the insurer’s contractual obligation to provide cover. Any exclusion based on illegality must comply with the strict requirements applicable to exclusions under French insurance law.

Sanctions issues are typically dealt with on a case-by-case basis, involving the insurer’s legal and compliance teams and, where necessary, discussions with regulators. This can result in payment being delayed even where the underlying coverage position is not itself disputed.

Claims handling practices have come under increasing scrutiny in France, both from the French Prudential Supervision and Resolution Authority (ACPR) and from the courts. Late payment is a particular focus: under the Insurance Code, the insurer is required to pay the indemnity within the contractual timeframe, and unjustified delay can give rise to statutory interest and, in some cases, damages for abusive resistance.

The ACPR has also paid close attention to claims handling, including the time taken to process claims and the quality of insurers’ communication with policyholders. This became particularly visible during the COVID-19 pandemic, when delays in business interruption claims attracted significant attention, especially given the cash flow difficulties faced by many businesses.

That said, delays are not necessarily problematic where the claim is complex and requires further investigation or expert assessment. The key issue is whether the insurer has legitimate reasons for the delay and has handled the claim properly in the meantime.

ESG and climate-related risks are giving rise to new types of coverage disputes in France, though the area is still developing. On the environmental side, the recognition of ecological damage in the French Civil Code has broadened the scope of insurable environmental liability. Environmental policies have evolved into genuine multi-risks contracts, combining third-party liability cover with first-party remediation cost cover, and now span operating risks, construction and transactional exposures linked to M&A.

The emerging per- and polyfluoroalkyl substances (PFAS) crisis illustrates the challenge well. The scientific uncertainty surrounding these substances makes it difficult for insurers to assess future claims frequency and severity, and equally difficult to draft exclusion clauses precise enough to withstand judicial scrutiny under French law. Industry bodies have described the risk as systemic, and the tension between the obligation to provide coverage and the difficulty of pricing an uncertain exposure is palpable across the market. More broadly, in D&O, the risk of greenwashing claims is growing, and the French Duty of Vigilance Law creates additional exposure for companies and potentially their insurers in relation to environmental and human rights harm in supply chains.

Delegated authority arrangements are common in the French market, particularly in specialty lines where managing general agents or cover holders underwrite and sometimes handle claims on behalf of insurers. These arrangements can create disputes around the scope of the delegated authority, the binding nature of decisions taken by the delegate, and the allocation of responsibility for claims handling failures.

The main legal issue is whether the delegate acted within the scope of its mandate and whether the insurer is bound by its actions towards the insured. Under French law, the insurer will generally be bound by acts falling within the scope of the delegation, even where the delegate may have exceeded its internal instructions. Claims handling by delegates can also give rise to disputes, particularly where delays or errors have caused prejudice to the insurer or the insured.

Clear delegation agreements and well-defined authority limits are therefore important, particularly where underwriting and claims handling are both delegated.

Financial lines disputes in France are increasingly driven by the changing nature of the risks faced by companies and their directors. Regulatory investigations, shareholder actions and insolvencies are no longer exceptional events and can generate significant defence costs before any liability is established. This creates a particular tension in D&O insurance: the policy may need to respond at a very early stage, while the insurer may not yet know whether the allegations will ultimately give rise to an insured loss.

This issue is changing the way insurers approach coverage. They are paying greater attention to notification, prior knowledge and insured-versus-insured provisions, as well as to the allocation of defence costs where a claim involves both covered and uncovered conduct. Fraud is another example: insurers seek to exclude dishonest conduct, while insureds may argue that the exclusion should only affect the individual responsible and not the other directors.

The broader trend is therefore towards greater scrutiny of how claims develop over time. Insurers are seeking more information at placement and greater control over defence costs, while policyholders are increasingly focused on preserving access to the policy from the earliest stages of a dispute. In practice, this makes the financial lines policy less a simple indemnity mechanism than a framework for managing the financial consequences of a developing corporate crisis.

Casualty coverage disputes in France are shaped by the coexistence of several liability regimes and by the difficulty of determining which of them should ultimately drive the insurance response. Manufacturers and distributors may face both contractual and tortious liability, while specific statutory regimes apply in areas such as product liability, environmental liability and construction. The interaction between these regimes and the corresponding insurance policies is therefore a recurring source of disputes.

Product liability illustrates the issue particularly well. A single defect may affect thousands of products and generate claims from different parties, sometimes years after the products were placed on the market. The dispute is then not limited to whether there is liability: it may also concern causation, the date on which the loss occurred, aggregation and which policy should respond.

Environmental and construction claims raise similar questions. Environmental damage can develop progressively over many years, while construction defects may emerge long after completion and involve several successive policies. This creates difficult questions around the trigger, allocation and long-tail exposure.

Casualty claims are becoming more complex, and the central coverage question is shifting from whether a loss is insured to how it should be allocated between different liability regimes, policies and periods of insurance. Insurers are responding with more precise triggers, exclusions and sub-limits.

Principal claims against insureds in France continue to arise from bodily injury, property damage and product liability, but the profile of claims is becoming more varied. Product liability remains a significant area, particularly where a defect affects a large number of products and gives rise to claims further down the supply chain.

Construction disputes also generate substantial defence costs, given the number of parties involved and the length of time over which defects may emerge. Insurers are also frequently funding defence costs in professional and financial lines claims, including allegations of professional negligence, regulatory investigations and claims against directors. In these cases, defence costs can become substantial well before liability is established, making the scope of the insurer’s obligation to fund the defence an important issue in its own right.

Cyber claims are another growing area, particularly following ransomware attacks, data breaches and business interruption. What is interesting is that insurers are increasingly involved at an early stage, not only funding lawyers and technical experts after an incident but also coordinating forensic investigations, crisis management and mitigation measures.

The risk landscape for insureds in France is being reshaped by three main factors: technology, regulation and ESG.

On the technology front, the proliferation of connected devices, autonomous systems and AI-driven processes is creating new liability exposures that existing insurance products were not designed to cover. The central unresolved question is who bears liability when an AI system causes harm: the developer who designed the algorithm, the company that deployed it, or the end user who relied on its output. French law does not yet provide a clear answer, and the evolving EU framework on AI liability may significantly affect how claims are brought and defended.

Regulatory pressure is intensifying across multiple fronts. The the French Data Protection Authority (CNIL) is actively enforcing GDPR obligations, with fines that can run into millions of euros, increasingly triggering claims under D&O policies. The Sapin II anti-corruption framework imposes compliance obligations on larger companies, and failures can lead to both criminal proceedings and civil claims. ESG-related obligations, including reporting requirements under the Corporate Sustainability Reporting Directive (CSRD), are adding a further layer, with directors exposed to claims for inadequate disclosure or failure to implement credible transition plans.

Insurers are responding by tightening underwriting criteria, requiring evidence of robust compliance frameworks as a condition of cover, and in some cases withdrawing from sectors where the risk profile has become too uncertain to price reliably.

Defence costs in France have been rising steadily, particularly in complex product liability, construction and environmental disputes. A significant part of the cost comes from court-appointed expert proceedings. In complex cases, these proceedings can last several years, with each party usually retaining its own technical advisers alongside the court appointed expert. Expert fees, technical reports, site visits and written submissions can therefore generate substantial costs before the case even reaches the merits.

Multi-party disputes make matters more difficult. Product liability and construction cases may involve numerous manufacturers, suppliers, contractors and insurers, each represented by separate counsel and participating in the expert proceedings. Cross border disputes add another layer, with local counsel, translation costs and sometimes parallel proceedings in several jurisdictions.

This is increasingly affecting the relationship between insurers and insureds. Insurers are paying closer attention to defence budgets, the choice of counsel and the proportionality of fees, particularly where defence costs erode policy limits. This can create tensions when insureds want to appoint their preferred lawyers or experts. As a result, disputes over the funding and reasonableness of defence costs are becoming an increasingly important part of coverage disputes themselves.

France offers several mechanisms for managing litigation cost risk, although the market remains less developed than in common law jurisdictions. Legal expenses insurance is widely available and commonly used by individuals and SMEs, but its coverage limits generally make it less relevant for large commercial disputes.

Third party funding has grown steadily over the past decade, initially driven by international arbitration in Paris and increasingly extending to domestic commercial litigation. It remains less common than in some common law jurisdictions, but sophisticated claimants are increasingly considering it where the amount in dispute justifies the cost of funding. It can be particularly relevant for high value subrogation claims or coverage disputes where the claimant does not want to bear the litigation costs upfront. France does not have a specific regulatory framework for litigation funding, with arrangements largely governed by general contract law and professional rules. After-the-event insurance exists but remains relatively uncommon.

For larger disputes, parties are also increasingly using phased billing, fee caps and detailed budgets. Success fees are permitted provided they are combined with a fixed fee for the work performed, although fees based exclusively on the outcome of the case are not allowed.

AI generated and AI assisted claims are still a relatively new issue in France, so it is probably too early to say that they have materially increased claims volumes across the market. However, the use of AI tools by claimants, lawyers and consumers is making it easier and cheaper to generate complaints, organise supporting material and bring claims, particularly where a large number of individuals are affected by the same event.

An emerging issue is the reliability of evidence submitted in support of claims. AI can now be used to generate or alter photographs, documents, recordings or other material, making it increasingly difficult to establish whether evidence accurately reflects the underlying events. This creates obvious challenges for insurers, particularly in high volume claims where every piece of evidence cannot be independently verified.

AI also raises questions around the preparation of the defence itself. Insureds and their lawyers may increasingly use AI to review large volumes of documents, identify relevant evidence or prepare initial drafts. This can reduce costs, but creates concerns around confidentiality, accuracy and the reliability of AI generated material.

French law provides a broad right of direct action against liability insurers. It allows an injured third party to claim directly against the insurer of the party responsible for the loss, without having to obtain payment from the insured first. This is a fundamental feature of the French system and applies across most lines of liability insurance.

Direct actions are particularly common in product liability, construction and professional negligence claims. They are also frequently used by subrogated insurers seeking recovery from the liability insurer of the party responsible for the loss. In construction disputes, where several contractors and insurers may be involved, direct actions against the relevant liability insurers are routine.

The third party’s recovery remains subject to the terms of the policy, so the insurer can generally rely on applicable exclusions, limits and deductibles. However, certain defences arising after the loss, such as cancellation of the policy for non-payment of premium, may not be enforceable against the third party. This creates an important asymmetry: the insurer may have a defence against its insured which it cannot necessarily use against the injured third party. This is a recurring source of coverage disputes, particularly in complex multi-party litigation.

Several developments are reshaping how claims against insureds are defended in France. Regulatory scrutiny has increased, particularly in financial services and corporate governance, with regulators taking a more active approach. This can create a dual track situation, where the insured has to manage a regulatory investigation while preparing for potential civil claims arising from the same facts. Defence strategy therefore often needs to be coordinated from the outset.

Reputational risk is also playing a greater role, particularly in disputes involving consumer products, environmental damage or allegations of corporate misconduct. In high profile cases, the commercial consequences of the dispute can influence settlement decisions alongside the legal merits. Insureds and insurers may consequently involve crisis communications advisers as well as litigation counsel.

Co-ordinated multi-claimant actions are another growing feature. France does not have a US-style class action system, although certain collective claims can be brought by approved associations, including in environmental and health matters. In practice, mass claims are also commonly managed through co-ordinated individual proceedings or joinder of parties. This can significantly increase the complexity and cost of the defence, particularly where numerous claimants are pursuing similar allegations. Insurers are therefore paying greater attention to early coordination of counsel, experts and defence costs.

Geopolitical developments are having a tangible impact on insurance disputes in France, although the effect is currently felt more through coverage analysis and underwriting than through a dramatic increase in litigation volumes. The conflict in Ukraine has been the most significant driver, raising coverage questions across several lines, including political risk, trade credit, marine cargo, aviation and property damage. Insurers with exposure to Ukrainian or Russian risks have had to address difficult questions around war exclusions, territorial scope and the interaction between contractual obligations and sanctions compliance.

Trade tensions, particularly between the EU, the USA and China, are also affecting the insurance landscape. Export credit and political risk insurers are facing increased uncertainty, while tighter technology export controls are creating new risks for manufacturers and their insurers. Energy market volatility has had a similar effect, increasing both property damage and business interruption exposures in the industrial sector.

More broadly, these developments are making geopolitical risk harder to isolate within a single policy. A political event can trigger supply chain disruption, property damage, business interruption and sanctions issues at the same time. This is likely to make allocation, causation and aggregation increasingly important in future coverage disputes.

The EU sanctions regime, significantly expanded since 2022 in response to the conflict in Ukraine, has created practical difficulties for insurers operating in France. The first challenge is determining whether a claim involves a sanctioned party, sector or goods, and whether payment would breach applicable restrictions. This requires screening throughout the claims process, from notification of the claim through to payment.

Sanctions can also affect the insurer’s coverage position. Insurers increasingly rely on sanctions limitation clauses to avoid being contractually required to make a payment that would breach applicable restrictions. However, the enforceability and precise scope of these clauses remain relatively untested under French law. Insureds may therefore challenge their application, particularly where the connection between the claim and the sanctioned activity is indirect or uncertain.

Cross-border payment restrictions add another layer of difficulty, especially where several jurisdictions and sanctions regimes are involved. In practice, this can result in claims being put on hold while the insurer carries out compliance checks, even where there is no real dispute as to coverage.

War and terrorism exclusions are being tested in ways that their original drafters did not necessarily anticipate. The conflict in Ukraine has brought particular attention to war exclusions in property, aviation, marine and political risk policies. The central question is often whether the exclusion applies only to losses directly caused by an act of war, or also to wider consequences of a conflict, such as supply chain disruption, sanctions related losses or cyber-attacks linked to state actors.

The cyber context is particularly difficult. Whether a state sponsored cyber-attack can be treated as an act of war for the purposes of an insurance exclusion remains relatively unsettled under French law. Insurers are therefore revising war exclusion wordings to address these risks, but older policies remain in force and can give rise to uncertainty when a loss does not fit neatly within traditional concepts of warfare.

Terrorism exclusions have been less contentious in France, partly because the country has a well-established public private reinsurance mechanism, GAREAT, for terrorism risks.

Political risk exclusions are also receiving greater attention, particularly where sanctions lead to expropriation, forced divestment or restrictions on investments. Overall, recent events have exposed the limits of traditional exclusions and increased the importance of precise policy wording.

Geopolitical disruptions, together with the experience of COVID-19, have exposed a structural limitation in traditional property and business interruption insurance. The key issue is often not the amount of the loss, but whether the loss falls within the policy trigger at all. A manufacturer may suffer substantial losses because a key supplier cannot deliver components following sanctions, a port closure or an energy shortage, without any physical damage occurring at the insured’s premises. Traditional business interruption cover may therefore provide no response unless the policy expressly extends to contingent business interruption or other non-damage triggers.

This has generated difficult coverage questions around the distinction between physical damage, loss of use and purely economic loss. Energy volatility creates a similar problem where increased electricity or gas prices affect production costs without any physical damage.

Aggregation adds another layer. If sanctions or disruption to a critical shipping route affect hundreds of insureds, insurers and reinsurers may face substantial accumulation under policies that were priced on the assumption of more independent losses. Whether these claims constitute one occurrence or multiple occurrences can therefore materially change the available limits and the overall exposure.

Geopolitical uncertainty is likely to remain a defining feature of the insurance market over the next 12 to 18 months. Geopolitical risk now extends well beyond the conflict in Ukraine, with developments in the Middle East, growing trade tensions between major economies and restrictions affecting technology and critical supply chains creating a broader and more permanent source of uncertainty.

On the underwriting side, insurers are likely to continue tightening war, sanctions and political risk exclusions, with greater attention to territorial exposure and dependencies on critical suppliers and infrastructure. More detailed sanctions compliance information is also likely to be required at placement and renewal.

On the dispute side, recent developments in the Middle East are likely to generate further scrutiny of war and political violence exclusions, particularly where geopolitical events result in property damage, business interruption or supply chain disruption. Sanctions arising from ongoing conflicts may also create disputes over the insurer’s ability to make payments where the insured, the loss or the transaction has a connection with a sanctioned entity or jurisdiction.

The most significant emerging risks currently shaping the French insurance market are cyber and new technologies, environmental liability, and climate transition risk. Each raises different questions for underwriting, coverage and disputes.

Cyber and new technologies are increasingly interconnected. Cyber-attacks, ransomware and widespread software vulnerabilities are now generating a steady flow of claims, while AI, connected devices and autonomous systems are adding new layers of exposure. A single incident can combine cyber, business interruption, technology failure and liability issues, with responsibility potentially shared between the user, developer, manufacturer and technology provider. This is making causation and the application of traditional policy wordings increasingly difficult, particularly where a cyber-attack has systemic consequences or involves a state-linked actor.

Environmental liability, particularly PFAS contamination, presents a different challenge. The recognition of ecological damage as a distinct head of loss in French law, together with specialised environmental policies covering third-party liability and remediation costs, has expanded the potential scope of environmental coverage. PFAS may put significant pressure on this model because scientific uncertainty and potentially very large remediation costs make the risk difficult to quantify.

ESG factors are reshaping French insurance across underwriting, claims, and regulatory enforcement. On the underwriting side, insurers increasingly integrate ESG criteria into risk selection and some decline exposure to high-carbon industries, creating coverage gaps that generate disputes over exclusion clauses. This trend is contentious where renewable energy projects paradoxically struggle to obtain coverage, exposing inconsistencies that have been criticised by industry bodies such as the French professional association for risk management and corporate insurance (AMRAE).

On the claims front, the most significant developments concern D&O liability. Directors face growing exposure to greenwashing allegations, regulatory investigations into ESG disclosures, and shareholder actions based on alleged failure to manage climate-related transition risks. The CSRD framework will intensify this exposure by mandating detailed sustainability reporting that may form the basis for future claims if statements prove inaccurate.

Misrepresentation and non-disclosure are becoming more relevant as insurers ask granular questions about environmental practices and supply chain governance. If a loss occurs and ESG representations prove inaccurate, the risk of coverage denial increases materially.

Regulatory scrutiny from the ACPR is also increasing, with climate stress tests becoming more severe and consumer associations actively monitoring greenwashing in ESG-labelled products, making litigation a credible threat. The Duty of Vigilance Law further increases insurers’ exposure to claims for ESG-related failures, completing a framework where governance, compliance, and litigation risk converge to recalibrate risk assessment.

Data protection and privacy laws are having a direct impact on insurance practice in France. The GDPR, enforced domestically by the CNIL, imposes stringent obligations on companies that process personal data, and breaches can result in fines of up to 4% of global turnover. These fines are generally not insurable under French law, as the ACPR considers them contrary to public policy, though this position remains untested by the courts. Defence costs associated with CNIL investigations and civil claims following a data breach are, however, frequently covered under cyber or D&O policies.

From an underwriting perspective, insurers are increasingly requiring evidence of GDPR compliance as a condition of providing cyber coverage, including the existence of data protection officers, breach notification procedures, and incident response plans aligned with the ANSSI’s ReCyF framework. The demands-and-needs test applicable to insurers also requires them to verify that policyholders have sufficient security measures in place before coverage can be written.

The growing frequency and sophistication of cyber-attacks, including ransomware, has led to a hardening of the cyber-insurance market, with higher premiums, increased retentions, and more restrictive terms. Underwriting now systematically assesses cybersecurity governance, such as multi-factor authentication, immutable back-ups, and documented response plans, as material criteria.

In terms of litigation strategy, data breaches often trigger parallel proceedings, namely a CNIL investigation, civil claims from affected data subjects, and a coverage dispute with the insurer. Managing these parallel tracks requires careful coordination, as information disclosed in one proceeding can materially affect the outcome of another. The French Insurance Code further complicates claims handling by requiring policyholders to notify judicial or police authorities of any automated data system breach within 72 hours of becoming aware of it, failing which coverage may be forfeited.

The rapid expansion of data centre infrastructure in France is creating new and concentrated risk exposures that the insurance market is still learning to assess. Data centres present a unique combination of property, business interruption, environmental and liability risks. The physical assets are high-value and highly sensitive to operational conditions, and even a brief outage can cause substantial downstream losses for the businesses that depend on them.

From an underwriting perspective, the key concerns are the density of electrical equipment, the vulnerability of cooling systems, energy supply resilience, and the concentration of risk in a small number of large facilities. Business interruption coverage for data centre operators raises specific questions about the quantification of losses, particularly where the operator's clients suffer intangible harm that is difficult to measure. Traditional business interruption policies, built around stand-alone manufacturing facilities, do not map cleanly onto interconnected data centre operations.

Insurers are responding by developing bespoke underwriting criteria, including requirements for redundancy in critical systems, fire suppression standards, and business continuity planning. Some insurers have launched specialised facilities offering significant capacity for both construction and operational risks, while parametric solutions are emerging for natural perils. Risk assessment is becoming more engineering-led, with insurers deploying dedicated teams to conduct on-site evaluations.

Claims experience in this sector remains limited in France, but as the industry grows, so will the volume and complexity of disputes. Layered insurance programmes across multiple policies complicate claims handling, and disputes frequently arise over the scope of contingent business interruption coverage, particularly where a loss originates from third-party power or cooling failures.

Social media addiction and its mental health consequences are beginning to register as a risk category in France, though the insurance market is at a very early stage in terms of claims activity. The main exposure lies in product liability and D&O. Social media platforms could face claims alleging that their products are defective by design, in that they are intentionally engineered to be addictive, particularly for minors, creating what some have described as mental health traps for vulnerable users. Directors of platform companies may face D&O claims if they are found to have been aware of the harmful effects and failed to act.

French law provides several potential bases for such claims, including product liability for defective products, general tortious liability, and the evolving case law on the duty of vigilance. The EU Digital Services Act, a major piece of EU legislation establishing harmonised rules for digital services, also imposes new obligations on platforms regarding the protection of minors, which could give rise to regulatory enforcement and, in turn, insurance claims. A collective action against TikTok alleging that it exposed young users to harmful content, including content promoting suicide, has been filed before the Créteil judicial court, with a criminal investigation opened to examine whether the platform may promote suicidal behaviour among young users.

From an underwriting perspective, insurers are monitoring these developments closely and are likely to respond by scrutinising policy wordings for exclusion clauses relating to algorithm design, addiction, or mental health harms. More detailed disclosures concerning content moderation practices and compliance with the EU Digital Services Act may be required at the application stage.

For now, insurers are monitoring US litigation against social media companies as a leading indicator. If those cases result in significant judgments or settlements, the ripple effects are likely to reach the European and French markets, and coverage questions under general liability, product liability and D&O policies will follow.

France has a long-standing commitment to nuclear energy, and the development of next-generation technologies, including small modular reactors and fusion research, is creating new insurance considerations. The existing nuclear liability regime, governed by the Paris Convention on Third Party Liability and implemented through the Environmental Code, imposes strict liability on the nuclear operator and channels all claims through the operator, with mandatory insurance up to prescribed limits. This regime, however, was conceived for large traditional reactors and does not readily accommodate the distinct risk profiles of SMRs.

The question for next-generation technologies is whether and how this regime will apply. SMRs raise specific issues relating to the aggregation of risk where multiple units are located on the same site, the adequacy of current liability caps, and the applicable insurance requirements during construction and commissioning phases. The French market, through the Assuratome pool, has deep experience in nuclear risk and is engaged in adapting its products, but the regulatory framework is still being developed by the French Authority for Nuclear Safety and Radiation Protection (ASNR), and underwriting remains tentative pending finalisation of licensing and liability rules.

Fusion energy presents an even more complex situation, as it is currently excluded from the scope of the nuclear liability conventions, leaving victims without a specific compensatory regime and creating uncertainty for operators and insurers. French legal scholarship has identified the need to either extend the existing framework or create a dedicated liability regime for fusion activities.

Insurers are monitoring these developments closely, with access to capacity potentially becoming a more significant barrier to deployment than reactor design itself. Early engagement between developers, specialised brokers, and underwriters will be critical to validate insurability as these technologies progress towards commercial viability.

The ACPR has been increasingly active in several areas that directly affect dispute risk. Claims handling practices have been a consistent focus, with the ACPR issuing recommendations on processing timelines, transparency, and the treatment of policyholders during the claims process. The regulator has not hesitated to issue formal warnings where it identifies systemic shortcomings, and these supervisory actions directly influence dispute risk by setting benchmarks against which policyholders may later measure insurer conduct. Consumer protection is another priority, with particular attention to the clarity and fairness of policy terms, the adequacy of pre-contractual information, and the handling of complaints. The ACPR works closely with the French Directorate-General for Competition Policy, Consumer Affairs and Fraud Control (DGCCRF) on these issues, and the "value for money" principle has become a central theme, imposing co-responsibility across the entire distribution chain, including wholesale brokers.

ESG and sustainable finance are rapidly rising on the regulatory agenda. Insurers are expected to integrate sustainability risks into their risk management frameworks, and the ACPR has conducted climate stress tests on major French insurers. The regulator also emphasises that insurers should not only identify and mitigate these risks but also proactively engage in prevention strategies. Operational resilience, including cyber-resilience and business continuity, is another area of growing supervisory attention, driven in part by the EU Digital Operational Resilience Act (DORA), which has applied to insurance companies since January 2025.

The ACPR has made DORA implementation a top priority, compelling insurers to demonstrate robust ICT risk management and governance, which in turn influences underwriting decisions and contributes to the hardening of the cyber insurance market. The interplay between these regulatory priorities creates a demanding compliance environment that fundamentally shapes insurer behaviour and elevates dispute risk across multiple fronts, from claims handling and product design to ESG disclosures and operational resilience.

Several legislative and regulatory developments are expected to affect the French insurance market in the near term.

The EU AI Act, which entered into force in 2024 and is being phased in progressively, is introducing new obligations on providers and deployers of AI systems, with direct implications for liability and insurance coverage. The associated AI Liability Directive, which remains under consideration, is expected to introduce a presumption of causation for AI-related harm, which could significantly increase the volume of claims and reshape the coverage landscape for product liability and professional indemnity policies.

The CSRD has introduced detailed ESG disclosure requirements on large companies, which could generate new D&O exposure as the accuracy of these disclosures comes under scrutiny. The implementation of DORA requires insurers to strengthen their own operational and cyber-resilience frameworks, and non-compliance could give rise to regulatory sanctions.

On the domestic front, the French government has announced plans to reform the French natural catastrophe insurance regime, which has come under pressure from the increasing frequency and severity of climate-related events, particularly flooding and drought-induced subsidence. Any reform of this regime could have significant implications for property insurers and their reinsurers.

Signature Litigation

21/23 rue Balzac
75008 Paris
France

+33 01 70 75 58 00

Emmanuele.Lutfalla@signaturelitigation.com www.signaturelitigation.com
Author Business Card

Trends and Developments


Authors



Signature Litigation AARPI is a leading independent law firm specialising in high-value commercial litigation, international arbitration and investigations, headquartered in London with offices in Paris, Frankfurt and Gibraltar. The firm’s insurance and reinsurance disputes practice focuses on complex international insurance disputes, with a Paris team comprising one partner, two senior associates and one associate. The team acts for multinational companies and major global insurers and reinsurers across the full spectrum of insurance law, including liability, property damage, special risks, environmental liability, and financial lines. The practice excels in high-value, multi-party, multi-jurisdictional disputes involving master structure policies and captives, with significant experience in policy wording and coverage disputes across sectors including automotive, chemical, construction, energy, financial services, life sciences and telecommunications. The team also handles disputes arising out of natural disasters, major environmental incidents and global epidemics, and has established expertise in claims management, expert appraisal proceedings and industrial risk investigations.

Introduction

Between EUR330 billion and EUR1.7 trillion. That is the estimated cost of remediating per- and polyfluoroalkyl substances (PFAS) contamination across Europe by 2050, according to recent industry assessments. Meanwhile, a joint report published in 2025 by the Artificial Intelligence Underwriting Company (AIUC), Anthropic and OpenAI warns that a single major AI disaster could generate approximately USD100 billion in direct damage, with cascading economic consequences running into the trillions. These are not speculative projections drawn from worst-case modelling exercises. They reflect exposures that are already materialising in courtrooms, regulatory proceedings and boardrooms across multiple jurisdictions.

What links these three developments is not merely their novelty but their shared capacity to destabilise the foundational assumptions on which insurability rests: the ability to price risk, the requirement of fortuity, and the possibility of drafting exclusions with the precision that French law demands.

This article examines each of these frontiers in turn, tracing the specific challenges they pose for French practitioners and the adaptations that are already under way.

The Environmental Front

The architecture of French environmental insurance

The recognition of ecological damage by the law of 8 August 2016, now codified at Articles 1246 et seq of the Civil Code, marked a turning point. This reform introduced a distinct right of action for harm to ecosystems, open to the State, local authorities, the French Biodiversity Agency and approved environmental associations. Restoration of the damaged ecosystem takes priority over monetary compensation. The limitation period runs for ten years from the date the ecological damage manifests itself. For insurers, this development transformed environmental liability from a peripheral concern into a core underwriting challenge, because the range of claimants, the preference for restoration and the long tail of potential claims all complicate reserving and pricing.

Environmental policies have responded by evolving into genuine multi-risk contracts. They combine a conventional third-party liability guarantee, indemnifying the injured party, with a first-party component covering the remediation costs incurred by the operator. Two heterogeneous logics coexist within the same contract, which explains why practitioners increasingly describe these products as multi-risk policies rather than simple liability covers.

Environmental insurance broadly falls into three families: operating-risk policies for pollution arising from ongoing industrial activity, construction policies for pollution discovered during or after building works, and transactional policies for historical contamination identified after a change of ownership.

The distinctions matter in litigation because they affect the trigger of cover, the relevant policy period and the allocation of responsibility among insurers.

Alongside civil liability, a parallel administrative regime, introduced into French law following a 2004 EU directive, allows the authorities to order operators to prevent or remediate qualifying environmental damage. It is rarely used in practice and remains largely in the background to the civil liability disputes that usually determine insurance coverage.

The PFAS Crisis and the Limits of Insurability

The scale of PFAS exposure is already visible. In the United States alone, manufacturers have settled for more than USD18 billion. For insurers, however, the real difficulty is not the size of the numbers but the impossibility of knowing what the final bill will look like, because the science is still catching up with the contamination.

PFAS encompass several thousand individual substances whose health effects and causal pathways remain only partially understood. How does an insurer price a risk whose frequency and severity cannot be modelled with any confidence? And how does an insurer draft an exclusion clause that will withstand judicial scrutiny under French law, which requires exclusions to be formal and limited, when the scientific boundaries of the risk are still shifting? The paradox is acute. An exclusion that is too broad risks being struck down as insufficiently limited. An exclusion that is too narrow may leave the insurer exposed to precisely the losses it sought to avoid.

There is a more fundamental obstacle. French insurance law requires fortuity as a condition of valid coverage. Intentional pollution and chronic contamination that is the foreseeable and permanent consequence of an industrial process fall outside the scope of insurance entirely. They are not excluded by a contractual clause; they are uninsurable by nature. For PFAS, the classification is not always straightforward. Where contamination results from the ordinary and known use of these substances over decades, the argument that there was no genuine uncertainty at the time of the alleged pollution becomes difficult to dismiss.

The French Insurance Federation and the French Reinsurance Professionals Association have taken the position that PFAS represent a systemic risk whose management falls primarily to public authorities. Whether the market will find contractual mechanisms to retain some portion of the exposure remains one of the most consequential open questions in French environmental insurance.

For insurers, PFAS will therefore generate litigation as much as underwriting concern. Policyholders are likely to challenge PFAS exclusions that are drafted so broadly or imprecisely that they fail French law’s requirement that exclusions be formal and limited. In multi-party industrial contamination cases, subrogation disputes may proliferate as property damage insurers seek recovery from successive liability insurers, operators, manufacturers and other contributors, with each contesting causation and allocation. The direct-action mechanism, which permits an injured third party to claim directly against the liable party’s insurer, adds a further procedural route and may bring insurers into proceedings before coverage issues have been resolved between insurer and insured.

Climate Litigation and the Duty of Vigilance

On 12 February 2025, the Paris Judicial Court delivered its decision in proceedings brought by Friends of the Earth France, Greenpeace France and a French environmental association against TotalEnergies. The ruling is significant not because the court found a breach of the duty of vigilance (the merits remain to be determined at a hearing scheduled for January 2027) but because of the analytical framework it established. The court reasoned in terms of contribution to climate change rather than direct causation and considered that Scope 3 emissions, those generated by the end use of products sold by the company, could fall within the scope of the vigilance obligation. For a major oil and gas company, Scope 3 represents the vast majority of its carbon footprint.

The TotalEnergies case does not stand alone. In 2023, Oxfam France and several co-claimants launched proceedings against BNP Paribas, arguing that the bank’s financing of fossil fuel projects violates its own duty of vigilance under the Law of 27 March 2017. The extension of climate accountability to financial institutions signals that the perimeter of potential defendants is far wider than the extractive and industrial sectors.

What does this mean for insurers? Several consequences follow. Directors and officers face mounting personal exposure to greenwashing allegations, particularly as the EU Corporate Sustainability Reporting Directive (CSRD) imposes detailed and auditable sustainability disclosures. A company that overstates its environmental credentials in its CSRD reporting creates a documentary trail that plaintiffs can exploit. D&O policies will bear an increasing share of this litigation cost. Beyond D&O, the duty of vigilance law itself opens a broader front: companies are required to identify and prevent serious harms to human rights and the environment throughout their supply chains, and a failure to do so can ground civil liability. Insurers providing liability cover to companies subject to these obligations will need to assess not only the policyholder’s direct operations but the adequacy of its vigilance plan across its entire value chain.

Climate proceedings are also translating into insurance disputes. D&O insurers may face early notification and coverage questions when directors are named personally, even before liability is established. Liability insurers must determine whether duty of vigilance claims fall within standard wordings or represent a new category of uninsured risk. In multi-party climate cases, subrogation may be contested between property and liability insurers, while defence costs must be allocated between covered directors, corporate entities and uninsured conduct.

Cyber-Risk: From Technical Incident to Systemic Threat

The French regulatory framework

Article L. 12-10-1 of the Insurance Code, introduced by Law No 2023-22 of 24 January 2023 on the Orientation and Programming of the Ministry of the Interior (the “LOPMI Law”), makes the payment of an insurance indemnity for certain cyber-attacks conditional on the reimbursement of ransomware payments on the filing of a criminal complaint by the insured within 72 hours of becoming aware of the attack. The provision was intended to improve the reporting of cybercrime and to give law enforcement earlier visibility into active incidents. In practice, it added a new procedural layer to coverage analysis: an insured who fails to file in time may be unable to obtain payment under the relevant insurance contract, even if the policy otherwise provides cover. The provision has generated debate among practitioners, particularly regarding its interaction with policies that cover business interruption losses flowing from the same attack but do not specifically reimburse the ransom.

At the European level, the Digital Operational Resilience Act, applicable to financial entities including insurers since January 2025, imposes prescriptive requirements on ICT risk management, incident reporting, operational resilience testing and third-party risk oversight. The French Prudential Supervision and Resolution Authority has made cyber-resilience a supervisory priority, reflecting the recognition that insurers are themselves potential targets as much as they are providers of cyber cover.

The French Insurance Federation’s 2025 risk map ranked cyber-risk as the French insurance industry’s leading risk, reflecting attacks that increasingly cross traditional lines of business. The insurer’s role is changing most visibly in the conditional nature of cover: policies increasingly require policyholders to maintain specified cybersecurity standards. Coverage may therefore depend not only on the occurrence of an attack but also on compliance with contractual security obligations. The policy is no longer simply a promise to indemnify loss after the event, it can shape risk management before the loss occurs.

Cyber-insurance is consequently becoming a fertile source of coverage litigation. The 72-hour complaint condition may produce split outcomes: an insured that reports a ransomware attack late may be unable to obtain payment under the relevant insurance contract, while arguing that business interruption losses flowing from the same attack remain covered under the policy. Insurers may invoke war exclusions for state-sponsored attacks, but attribution is uncertain and proving that a cyber-operation legally qualifies as an act of war is difficult. Similar disputes arise over silent cyber losses under traditional property or liability policies. Finally, refusing a legitimate claim under a contested sanctions limitation clause or debatable war exclusion may amount to abusive resistance to payment, exposing the insurer to damages beyond the policy indemnity.

Data Protection Sanctions and the Insurability Debate

Recent enforcement actions by the French Data Protection Authority have kept data protection firmly on the insurance agenda. In December 2024, the authority imposed a fine of EUR2.3 million on Free and Free Mobile for data protection failures, a decision that also triggered a class action claim. Earlier that year, a breach at the national employment agency exposed the personal data of 43 million individuals, an incident whose scale underscored the systemic nature of data risk in public infrastructure.

The insurability of administrative fines remains a contested question in French law. The French Prudential Supervision and Resolution Authority has indicated that insuring fines imposed by public authorities is contrary to public policy, on the basis that allowing indemnification would deprive the sanction of its deterrent effect. The market has adopted a pragmatic position: fines themselves are generally not covered, but the defence costs incurred in challenging or mitigating a regulatory sanction are insurable under cyber or D&O policies. The distinction is significant in practice, because legal and advisory fees in complex data protection proceedings can be substantial.

The Cyber-War Exclusion and Systemic Risk

French law provides no specific legal definition of a cyber act of war. When an insurer invokes a war exclusion against a state-sponsored cyber-attack, the burden of proving that the attack qualifies as an act of war falls on the insurer. In the absence of clear legal criteria, this burden is substantial. State attribution in cyber-operations is inherently uncertain, and even where intelligence agencies attribute an attack to a state actor, the legal characterisation of that act as “war” rather than espionage, sabotage or criminal activity remains deeply contested.

The AIUC/Anthropic/OpenAI report published in 2025 draws an instructive comparison. After the attacks of 11 September 2001, insured losses exceeded USD40 billion and triggered a near-total withdrawal of terrorism cover from the commercial market. Governments intervened with public backstop mechanisms (GAREAT in France, Pool Re in the United Kingdom, TRIA in the United States) to restore insurability. The report warns that a comparable dynamic could unfold in respect of AI-related losses, where a single catastrophic event might cause insurers to withdraw from the market unless structural mechanisms are put in place.

The scale of the exposure is difficult to overstate. According to the same report, over 90% of insurers’ AI-related exposure is embedded in conventional policies that were never designed to cover autonomous systems. This “silent” cover is largely unpriced and invisible to the insurers themselves. A major loss event would crystallise liabilities that no one has budgeted for. GAREAT, the French public-private terrorism reinsurance pool, is frequently cited as a potential model for a cyber or AI catastrophe mechanism. Whether the political will exists to create such a pool, and whether the private market would accept the constraints it would impose, are questions that have moved from the academic sphere to the practical agenda of the French insurance industry.

Generative AI: The next frontier of Liability

From technical error to autonomous liability

At the European level, two instruments are reshaping the liability landscape. Directive (EU) 2024/2853 on liability for defective products now expressly includes software and digital files in the definition of “product”, effective from 9 December 2026. The EU AI Act, which entered into force in 2024 and is being implemented in phases, establishes a risk-based classification for AI systems. The proposed AI Liability Directive, however, was withdrawn by the European Commission in 2025.. Together, these two instruments are creating a regulatory architecture in which the developer, the deployer and the end user each face distinct but potentially overlapping obligations.

The litigation is not hypothetical. Google is defending a claim exceeding USD110 million after its AI Overviews feature allegedly defamed Wolf River Electric, a US solar installation company. Arup, the British engineering consultancy, lost HKD200 million after fraudsters deployed AI-generated deepfakes of senior executives to authorise fraudulent payments.

Insurance Coverage Adaptation and the Preventive Role of the Insurer

Algorithmic harm does not sit comfortably within any single policy category. A defamatory output from a generative AI system might trigger a media liability policy. A flawed automated financial recommendation could engage professional indemnity cover. A deepfake fraud falls squarely within cyber-insurance. A chatbot-induced suicide raises product liability questions under the new EU directive. The classification problem is not academic; it determines which insurer pays, which exclusions apply, and whether there is coverage at all.

Faced with this fragmentation, some insurers are beginning to condition AI-related coverage on compliance with governance requirements: bias testing, audit trails, human oversight protocols, incident response procedures. The insurance contract, once again, assumes a regulatory function. By specifying the conditions under which coverage attaches, the insurer shapes the insured’s approach to algorithmic risk management. This is the same dynamic observed in cyber-insurance, applied now to a broader and less well-defined category of exposure.

AI is now likely to generate insurance litigation in its own right. The silent-cover problem is particularly acute: more than 90% of insurers’ AI exposure is embedded in conventional policies that were never designed for autonomous systems. A classification battle may determine whether cyber, professional indemnity, media liability or product liability cover responds, making the boundary between policies a genuine source of litigation between insureds and insurers. A major AI loss event could trigger coverage denials across several lines at once, with each insurer relying on different exclusions, triggers or limits. The result could be coordinated, high-volume insurance litigation rather than a single dispute over a single policy.

French law may prove more adaptable than it first appears. The liability of the guardian of a thing under Article 1242 of the Civil Code, long applied to physical objects, could potentially be extended to the operator of an AI system that causes harm, on the reasoning that the operator exercises a form of use, direction and control over the system. The revised EU directive has expanded product liability to include software, opening yet another avenue for claimants. Recent French legal scholarship has argued that existing doctrines of civil liability are capable of absorbing AI-related harm without requiring a sui generis regime. The question is whether the courts and the legislature will share that confidence, or whether the pace and scale of AI deployment will force more structural intervention.

Conclusion

Contamination by substances whose long-term effects remain uncertain. Cyber-attacks that no one can reliably attribute. AI systems whose outputs escape the control of the people who deployed them. What these risks have in common, from a litigation perspective, is that they generate coverage disputes which existing policy wordings were never designed to resolve.

The disputes are already here. Insurers are refusing PFAS claims on the basis of exclusions that may not survive judicial scrutiny. Policyholders are contesting war exclusions invoked against cyber-attacks whose state sponsorship cannot be proved. D&O carriers are receiving notifications for greenwashing and duty of vigilance proceedings that do not correspond to any standard insuring clause. And when a generative AI system causes serious harm, multiple insurers may simultaneously deny cover, each pointing to a different policy boundary, leaving the insured without a response from any of them.

French courts will be asked to settle these questions with tools that were designed for a different era of risk. The requirement that exclusions be formal, limited and clear gives policyholders a powerful argument against vague or overbroad carve-outs. The direct-action mechanism puts insurers in front of judges even before coverage has been agreed between insurer and insured. And the concept of abusive resistance to payment means that an insurer who unreasonably delays or refuses indemnification faces exposure beyond the policy limit.

Whether these existing mechanisms prove sufficient, or whether structural responses along the lines of GAREAT become necessary for cyber, AI or PFAS, is an open question. What is already clear is that the volume, complexity and novelty of insurance coverage disputes in France will continue to increase. For practitioners on both sides, the litigation pipeline has never looked fuller.

Signature Litigation AARPI

21/23 rue Balzac
75008 Paris
France

+33 01 70 75 58 00

Emmanuele.Lutfalla@signaturelitigation.com www.signaturelitigation.com
Author Business Card

Law and Practice

Authors



Signature Litigation AARPI is a leading independent law firm specialising in high-value commercial litigation, international arbitration and investigations, headquartered in London with offices in Paris, Frankfurt and Gibraltar. The firm’s insurance and reinsurance disputes practice focuses on complex international insurance disputes, with a Paris team comprising one partner, two senior associates and one associate. The team acts for multinational companies and major global insurers and reinsurers across the full spectrum of insurance law, including liability, property damage, special risks, environmental liability, and financial lines. The practice excels in high-value, multi-party, multi-jurisdictional disputes involving master structure policies and captives, with significant experience in policy wording and coverage disputes across sectors including automotive, chemical, construction, energy, financial services, life sciences and telecommunications. The team also handles disputes arising out of natural disasters, major environmental incidents and global epidemics, and has established expertise in claims management, expert appraisal proceedings and industrial risk investigations.

Trends and Developments

Authors



Signature Litigation AARPI is a leading independent law firm specialising in high-value commercial litigation, international arbitration and investigations, headquartered in London with offices in Paris, Frankfurt and Gibraltar. The firm’s insurance and reinsurance disputes practice focuses on complex international insurance disputes, with a Paris team comprising one partner, two senior associates and one associate. The team acts for multinational companies and major global insurers and reinsurers across the full spectrum of insurance law, including liability, property damage, special risks, environmental liability, and financial lines. The practice excels in high-value, multi-party, multi-jurisdictional disputes involving master structure policies and captives, with significant experience in policy wording and coverage disputes across sectors including automotive, chemical, construction, energy, financial services, life sciences and telecommunications. The team also handles disputes arising out of natural disasters, major environmental incidents and global epidemics, and has established expertise in claims management, expert appraisal proceedings and industrial risk investigations.

Compare law and practice by selecting locations and topic(s)

{{searchBoxHeader}}

Select Topic(s)

loading ...
{{topic.title}}

Please select at least one chapter and one topic to use the compare functionality.