Digital healthcare companies are collecting increasing amounts of patient data at the same time as facing greater risks from criminals and tougher rules from regulators. Cyber and privacy insurance should be tailored to a company’s specific exposures. It should include a separate section for extortion and extend to cover regulatory fines and penalties.