Terrorism Risk Insurance Act (TRIA) — Federal Backstop for Catastrophic Terrorism Losses

After the September 11, 2001 attacks caused over $40 billion in insured losses — and private insurers immediately began excluding terrorism from new policies, threatening to freeze commercial real estate lending and construction — Congress enacted the Terrorism Risk Insurance Act of 2002 (TRIA, Pub. L. 107-297, codified at 15 U.S.C. § 6701) to prevent the private insurance market from abandoning coverage for terrorism risk entirely. TRIA creates a federal backstop: the government co-pays large terrorism losses alongside private insurers, making it economically viable for insurers to continue offering terrorism coverage and keeping commercial insurance markets functioning. Administered by the Treasury Department under 31 CFR Part 50 (the Terrorism Risk Insurance Program), TRIA requires insurers to make terrorism coverage available in all commercial property-and-casualty lines, mandates policyholder disclosure of TRIA terms, and activates federal payments when a certified act of terrorism causes aggregate industry losses exceeding the program trigger. TRIA has been reauthorized multiple times — most recently by the Terrorism Risk Insurance Program Reauthorization Act of 2015 (TRIPRA 2015) through December 31, 2027 — reflecting the private market's continued reluctance to fully absorb open-ended terrorism risk without a federal safety net.

Current Rule (2026)

What This Rule Does

TRIA solves a market failure that surfaced on September 12, 2001: terrorism risk is so concentrated, unpredictable, and potentially catastrophic that private reinsurance markets cannot fully absorb it without government backstop. Without TRIA, commercial property and casualty insurers would either exit the market, exclude terrorism from all policies, or charge premiums so high that commercial real estate, construction, and large-event businesses would be effectively uninsurable. The result would be credit market disruption — lenders require property insurance to make commercial real estate loans — and economic harm extending far beyond the insurance sector.

TRIA's mechanics work in layers. First, any insurer writing commercial property-and-casualty insurance in the United States must make terrorism coverage available (§50.20 — the mandatory availability requirement). Insurers cannot refuse to quote terrorism coverage for any commercial policyholder who requests it; they can price it, but they cannot decline to offer it. Second, each insurer carries its own deductible equal to 20% of its prior-year direct earned premiums in TRIA-covered lines — the insurer pays the first 20% of its own terrorism losses without any federal share. Third, once aggregate industry losses from a certified terrorist act exceed the $200 million program trigger, the federal government pays 80% of each insurer's covered losses above that insurer's deductible. Fourth, if total federal payments would exceed $100 billion in a calendar year, Treasury applies a pro-rata loss percentage to cap its share and Congress must appropriate additional funds.

The certification mechanism is the linchpin: the Secretary of the Treasury, concurrently with the Secretary of State and the Attorney General, must certify that an act qualifies as an "act of terrorism" within 180 days of the event. Certification requires that the act was violent or dangerous to human life, property, or infrastructure; committed by an individual or individuals as part of an effort to coerce the U.S. civilian population or influence U.S. policy; occurred within the United States or on a U.S. flag vessel or aircraft; and resulted in aggregate property-and-casualty losses exceeding $5 million. Critically, domestic terrorism without a foreign nexus is not certifiable under the current statute — TRIA was designed for foreign-directed attacks.

After certification, TRIA creates a federal cause of action (§50.100) that consolidates all related claims into federal district court in the Southern District of New York and preempts state-law tort claims (§50.101) — channeling all claims through a single federal proceeding to manage the litigation efficiently.

Key Provisions

• § 50.10 — Disclosure requirements: insurers must provide "clear and conspicuous" disclosure to each commercial policyholder of whether terrorism coverage is included, what the federal share and insurer deductible are, and the TRIA annual cap; failure to disclose is a condition that can disqualify an insurer from receiving federal payment
• § 50.20 — Mandatory availability: all participating insurers must make available, in each property-and-casualty insurance policy, coverage for insured losses from acts of terrorism; an insurer may not exclude terrorism as a condition of providing coverage (though separate terrorism insurance policies at separate premiums are permissible)
• § 50.25 — State residual market entities: state-run insurance pools (FAIR plans, beachfront plans, wind pools) and state workers' compensation funds are included in the TRIA program as "participating insurers" — ensuring that state insurance of last resort mechanisms also carry terrorism backstop protection
• § 50.64 — Certification process: describes the mechanics of the Secretary's terrorism certification — the timeline (180-day window), the coordination with State and DOJ, the notice to Congress, and the publication in the Federal Register; a certification binds all TRIA-participating insurers immediately
• § 50.74 — Aggregate industry losses calculation: Treasury determines aggregate losses for program trigger purposes; methodology for summing insurer-reported losses across all lines to determine whether the $200M trigger has been reached
• § 50.80 — Claims procedures: after certification, each insurer files a detailed claim with Treasury documenting its qualifying covered losses and supporting data; Treasury reviews and approves or rejects each insurer's pro-rata federal share
• § 50.92 — Audit and investigative procedures: Treasury may audit any insurer's terrorism loss claims at any time; insurers must maintain detailed records; false or fraudulent claims constitute federal fraud violations subject to criminal prosecution
• § 50.100 — Federal cause of action: certification creates a federal cause of action in the Southern District of New York; all related litigation must be filed there; Treasury approval required for settlements exceeding specified thresholds (§50.102)
• § 50.101 — State causes of action preempted: following certification, state tort claims from the same certified act are preempted by the federal cause of action — creating a single litigation channel for mass casualty or mass property events
• § 50.110 — $100 billion annual cap: the federal government's total TRIA payments may not exceed $100 billion in any calendar year; above that level, Treasury is not obligated to pay (Congress decides whether to appropriate additional funds); the insurer's deductible obligation also terminates at the $100B level
• § 50.112 — Pro-rata loss percentage (PRLP): if the $100B cap is triggered, Treasury calculates a PRLP (percentage applied uniformly to all qualifying insurer claims) to allocate the available $100B across all claims; insurers apply the PRLP to determine the actual federal share of each covered loss
• §§ 50.120–50.135 — Recoupment and surcharge: Treasury recoups federal payments through mandatory surcharges on future commercial insurance premiums; the recoupment process can take years depending on the scale of the loss; surcharges are distributed across commercial policyholders broadly — not just those who had terrorism losses

How It Affects You

If you own or operate commercial real estate, a hotel, a stadium, a major public venue, or any large commercial property: You are one of the primary commercial beneficiaries of TRIA. Without the federal backstop, terrorism insurance would likely be unaffordable for large urban properties in major markets — the same markets that are most likely to be targeted in a large-scale attack. Most commercial real estate lenders require terrorism insurance as a loan condition; TRIA makes that requirement achievable. Check your commercial property policy for a terrorism coverage endorsement — it should state the coverage explicitly and identify the premium charged for it. In post-9/11 markets (New York, Washington DC, Chicago, Los Angeles), terrorism insurance premiums as a share of total property insurance have ranged from 2–15% depending on property type, location, and construction. TRIA's mandatory availability requirement means your insurer cannot refuse to quote; your leverage is to compare quotes across carriers.

If you're an insurance buyer for a large organization (risk manager, CFO): TRIA creates a legal framework you should understand at renewal. The disclosure requirements (§50.10) mean your insurer must tell you: (1) whether terrorism is covered, (2) what the federal share percentage is, (3) what your insurer's deductible is, and (4) what the $100 billion cap means. Review these disclosures — if your policy excludes terrorism or has sub-limits that differ from TRIA terms, your organization carries the gap. TRIA does not cover workers' compensation exclusions for terrorism (workers' comp is mandatory in most states, and TRIA requires it to include terrorism), life insurance, health insurance, or title insurance. NBCR (nuclear, biological, chemical, radiological) exclusions remain the most contested area — some policies exclude NBCR attacks even if they would qualify under TRIA, which creates a gap in the backstop for unconventional terrorism scenarios.

If you're an insurance company or reinsurance professional: TRIA eligibility requires that your company be a participating insurer (licensed in the U.S., writing TRIA-covered lines). Your individual program deductible — 20% of prior-year direct earned premiums in TRIA lines — is the key financial metric. Model your deductible against your maximum credible loss exposure from a single large terrorist event in your geographic footprint; that gap between your deductible and the point where federal payments begin is your retained risk. Reinsurance for terrorism is available in the private market (particularly Lloyds of London and German reinsurers), but typically covers TRIA-eligible losses only above the federal layer — making TRIA's 80% federal share the primary risk transfer mechanism. After TRIPRA 2015's reauthorization through 2027, the policy debate about TRIA's long-term structure (full privatization vs. continued backstop vs. permanent public program) is ongoing; planning for the program's potential non-renewal after 2027 requires stress-testing your terrorism book without any federal share.

Statutory Authority

This rule implements:

• 15 U.S.C. § 6701 — Terrorism Risk Insurance Act of 2002, as amended by TRIEA 2005, TRIPRA 2007, and TRIPRA 2015: establishes the program, defines "act of terrorism," creates the federal share structure, mandates availability and disclosure requirements, and authorizes Treasury to administer the program through the Terrorism Risk Insurance Program (TRIP)

Recent Rulemakings

• 88 FR 16887 (March 2023) — Updated Treasury's rules implementing TRIPRA 2015, revising the mandatory availability provisions and updating program trigger and deductible structure to reflect current statutory thresholds; clarified that cyber attacks meeting the act of terrorism definition can qualify for TRIA coverage (an increasingly important issue as state-sponsored cyber attacks targeting critical infrastructure blur the line between conventional and cyber terrorism)
• 86 FR 30540/30541 (June 2021) — Updated the annual percentage cap and recoupment surcharge formula; revised data collection requirements for aggregate exposure reporting to Treasury
• 84 FR 62452 (November 2019) — Updated certification procedures, clarified the definition of NBCR (nuclear, biological, chemical, radiological) events, and aligned definitions with the TRIPRA 2015 reauthorization language

Recent Developments

• TRIA reauthorization clock (2027): TRIA is currently authorized through December 31, 2027. The insurance industry, commercial real estate sector, and major trade groups began reauthorization advocacy in 2025–2026, several years before expiration — a deliberate strategy following the market disruption caused by last-minute TRIA reauthorization debates in 2014. Congress allowed a brief lapse in TRIA authority in January 2015 (between TRIPRA 2007 expiration and final passage of TRIPRA 2015), causing significant market uncertainty; the industry's goal is to avoid a repeat.
• Cyber terrorism and TRIA coverage clarity: The 2023 Treasury rulemaking clarified that cyber attacks meeting TRIA's "act of terrorism" certification definition can be covered — an increasingly important question as state-sponsored cyber attacks target critical infrastructure. Treasury has issued guidance confirming that a cyber attack destroying physical property or causing bodily harm can qualify as a certified act of terrorism. The insurance industry has pushed for further clarity about how TRIA applies to "silent cyber" in traditional property policies.
• NBCR coverage gap: Nuclear, biological, chemical, and radiological (NBCR) attacks remain a contested coverage area. Many commercial policies exclude NBCR events even when a TRIA-certified act of terrorism is involved, creating a gap in coverage that TRIA's backstop doesn't fully address. Policy discussions about mandatory NBCR coverage under a future TRIA reauthorization are ongoing.
• Program trigger and deductible evolution: The current $200 million aggregate industry loss trigger means that small to mid-scale terrorist attacks — even ones causing significant insured losses — may not trigger TRIA's federal share. Critics argue the trigger is set too high; supporters argue it appropriately limits the federal backstop to truly catastrophic events. TRIA reauthorization discussions in 2025–2026 are expected to revisit the trigger level.
• Data collection improvements: Treasury's Terrorism Risk Insurance Program (TRIP) has expanded its annual data call to improve its model of industry aggregate exposures — essential for modeling the potential federal outlay in a large-scale event and for designing future reauthorization parameters.

Pending Action

TRIA reauthorization before December 31, 2027 is the dominant near-term legislative action. Industry groups (American Property Casualty Insurance Association, Real Estate Roundtable, U.S. Chamber of Commerce) have launched coordinated reauthorization campaigns targeting the 119th and 120th Congresses. Contentious issues in the reauthorization debate: (1) whether the $200 million aggregate trigger should be adjusted; (2) expanded cyber terrorism coverage clarity; (3) NBCR (nuclear/biological/chemical/radiological) coverage mandates; and (4) program cost-sharing ratios between private insurers and the federal backstop. Commercial real estate and construction firms, large event venues, and businesses with significant urban concentrations should monitor TRIA reauthorization progress closely — a lapse in coverage creates immediate insurance market disruption, as demonstrated briefly in January 2015.