Cyber insurance often includes coverage for legal and regulatory fines associated with data breaches under GDPR. It also supports companies in meeting GDPR requirements by funding risk assessments, security improvements, and incident response activities​ (ICLG IBR).