Why Your General Liability Policy May Not Cover Everything You Think It Does

General liability insurance is the foundation of most commercial insurance programs. It’s typically one of the first policies a business buys, it’s required by most commercial leases and client contracts, and it carries a name that sounds reassuringly broad.

But “general” is something of a misnomer. A standard commercial general liability (CGL) policy is actually a very specific instrument with carefully defined coverage grants, meaningful exclusions, and important limitations that many business owners never read closely until they need to file a claim.

By that point, it’s often too late to fix the gaps.

Here’s a plain-language breakdown of what a standard GL policy does and doesn’t cover — and where businesses most commonly find themselves without protection when they assumed they had it.

What a General Liability Policy Actually Covers

A standard CGL policy is built around three core insuring agreements:

Bodily injury and property damage liability.

This covers claims that your business caused physical harm to a person or damaged someone else’s property. A customer slips and falls in your store. A contractor accidentally damages a client’s building. A product you sold injures someone. These are the scenarios most people picture when they think of general liability.

Personal and advertising injury liability.

This covers certain non-physical harms your business may cause, including libel, slander, copyright infringement in your advertising, false arrest, and malicious prosecution. It’s a coverage many businesses don’t think about until a competitor or individual alleges that something in their marketing crossed a legal line.

Medical payments.

This is a no-fault coverage that pays for minor medical expenses when someone is injured on your premises or by your operations, regardless of whether you were negligent. It’s designed to handle small claims quickly and keep them from escalating into lawsuits.

That’s a meaningful set of protections. But the policy’s exclusions are equally extensive — and far less often discussed.

What a General Liability Policy Does Not Cover

Your own property.

GL insurance only covers damage to other people’s property. If your office is damaged by fire, your equipment is stolen, or your building is hit by a storm, your GL policy pays nothing. That’s what commercial property insurance is for. This surprises business owners who assume “general” means comprehensive.

Your employees’ injuries.

Workers’ compensation is an entirely separate coverage system. When an employee is injured on the job, your GL policy explicitly excludes that claim. In most states, workers’ comp is legally required precisely because GL doesn’t cover employee injuries.

Professional errors and advice.

If a client suffers a financial loss because of a mistake you made in delivering a professional service — a consultant gives bad advice, an accountant makes an error, a designer delivers work that causes a client to lose a contract — the GL policy will not respond. Professional liability (errors and omissions) coverage exists specifically for this exposure, and it’s one of the most commonly overlooked gaps for service businesses.

Cyber incidents.

A data breach, ransomware attack, or network outage is not a covered event under a standard CGL policy. Some older policies had ambiguous language that plaintiffs argued extended to cyber losses, but modern policies almost universally contain explicit cyber exclusions. If your business handles customer data, processes payments, or depends on connected systems, a standalone cyber liability policy is a separate and critical need.

Intentional acts.

Insurance covers accidents, not deliberate conduct. If a claim arises from something you or an employee did intentionally — even if the harm wasn’t intended — the GL policy may deny coverage on this basis. This exclusion is frequently litigated, but it remains a real limitation.

Contractual liability (with exceptions).

GL policies generally exclude liability you assume under a contract — unless the contract qualifies as an “insured contract” under the policy’s definitions. Most standard commercial leases and hold harmless agreements do qualify, but not all contracts do. If your business regularly signs agreements that shift liability to you, those contracts should be reviewed against your policy language.

Pollution.

The pollution exclusion in modern GL policies is broad and has been interpreted by courts to extend well beyond traditional environmental contamination. Depending on your industry and operations, you may need a separate pollution liability policy to address exposures that fall into this exclusion.

Employment practices.

Claims of wrongful termination, discrimination, harassment, or retaliation by current or former employees are not covered by a GL policy. Employment practices liability insurance (EPLI) is a separate product designed specifically for this exposure — and one that is frequently skipped by small and mid-sized businesses that assume the risk is low until it isn’t.

A general liability policy is not a backstop for every claim that could arise from running a business. It’s a specific tool for a specific set of risks. Treating it as a catch-all is one of the most expensive assumptions a business owner can make.

The Gaps That Show Up Most Often at Claim Time

In our experience working with businesses across industries, these are the situations where business owners most frequently discover their GL policy doesn’t cover what they thought it did:

•        A service business receives a claim that their work caused a client financial harm — and learns their GL policy excludes professional liability entirely

•        A small retailer experiences a data breach and finds out their GL policy has a cyber exclusion they didn’t know existed

•        A contractor signs a broad indemnification agreement and later discovers it doesn’t qualify as an “insured contract” under their policy

•        A business owner faces a wrongful termination lawsuit and realizes they have no EPLI coverage

•        A business with a home office or storage unit assumes their homeowner’s or renter’s policy extends to business activities — it almost never does

How to Close the Gaps

The goal isn’t to alarm you — it’s to make sure your insurance program actually matches your real-world risk. Most of these gaps can be addressed with the right combination of policies. The standard toolkit for a well-rounded commercial insurance program typically includes:

•        Commercial general liability — for bodily injury, property damage, and advertising injury

•        Commercial property — for your own building, equipment, and inventory

•        Workers’ compensation — for employee injuries

•        Professional liability / E&O — for service and advice-based businesses

•        Cyber liability — for data breaches, ransomware, and network incidents

•        Employment practices liability — for HR-related claims

•        Umbrella or excess liability — to extend limits above any of the underlying policies

Not every business needs every policy on that list. But every business deserves to know which ones they need and which exposures they’re currently leaving uninsured.

The Bottom Line

General liability is a critical foundation — but it’s just that: a foundation. The businesses that get hurt are the ones that buy it, check the box, and assume they’re covered. The ones that stay protected are the ones that take the time to understand what they have and where the edges are.

At Affinity Risk, we help business owners look at their full exposure picture, not just the policies they already own. If you’ve never had a coverage gap analysis done on your current program, that conversation is worth having before a claim makes it for you.

Reach out to an Affinity Risk advisor to schedule a review of your commercial insurance program.

© Affinity Risk  |  This content is for informational purposes only and does not constitute legal or insurance advice. Coverage terms vary by policy and carrier.