So, you would prohibit constructs like key person insurance [1] or cyber insurance [2] that have clauses for settling ransom payment claims for kidnaps or extor

So, you would prohibit constructs like key person insurance [1] or cyber insurance [2] that have clauses for settling ransom payment claims for kidnaps or extortion after a data breach? These already exist. [1]: https://www.travelers.co.uk/iw-documents/uk/documents/kidnap-and-ransom-coverage-examples-0814.pdf https://www.travelers.co.uk/iw-documents/uk/documents/kidnap... [2]: https://www.thehartford.com/cyber-insurance https://www.thehartford.com/cyber-insurance