Commercial insurance for healthcare practices

Healthcare practices — medical offices, dental practices, physical therapy clinics, chiropractic offices, and mental health practices — have insurance needs that go well beyond malpractice. Many practice owners focus exclusively on professional liability (malpractice) coverage and overlook significant commercial exposures. As an agent, understanding the full picture lets you be genuinely valuable to these clients.

Professional liability vs. commercial GL

The first distinction to clarify for healthcare clients: professional liability (malpractice) and commercial general liability are separate coverages that cover different types of claims.

• Professional liability / malpractice — covers claims arising from professional services: diagnosis, treatment, procedures, and advice. A patient injured by negligent care, a missed diagnosis, or a surgical error would be a malpractice claim. Most healthcare professionals already understand they need this coverage.
• Commercial general liability — covers claims that arise from premises and operations, not professional services. A patient who slips on a wet floor in the waiting room, a vendor who trips on a step, or a client who alleges property damage — these are GL claims that malpractice does not cover.

Healthcare practices need both. Some specialized medical professional liability carriers offer packages that include GL, but agents should verify this rather than assume.

The complete healthcare commercial insurance stack

• Professional liability (malpractice) — claims-made coverage for professional services
• Commercial general liability — premises liability and operations coverage
• Commercial property — medical equipment, furniture, computers, leasehold improvements. Medical equipment (X-ray machines, dental chairs, ultrasound units) can be very expensive to replace.
• Business income — if a fire or flood closes the practice for 60 days, business income replaces lost revenue. Healthcare practices that serve recurring patients may lose those relationships permanently if out of business for an extended period.
• Cyber liability — healthcare is the highest-risk industry for cyberattacks and data breaches, because patient health records (PHI) are extremely valuable on black markets. Cyber coverage is essential — HIPAA breach notification costs alone can be substantial.
• Workers compensation — clinical staff face exposure to needlestick injuries, infectious disease, and patient handling injuries
• EPLI — medical practices with multiple employees, especially with power dynamics between physicians and staff, face EPLI exposure. See EPLI coverage.

Healthcare-specific cyber risk

HIPAA requires healthcare providers to protect patient health information (PHI) and imposes significant penalties for data breaches. A breach affecting 500 or more patients requires notification to the HHS Office for Civil Rights and, in many cases, to the media in the affected state.

Cyber policies for healthcare should include: breach notification costs, credit monitoring for affected patients, regulatory fines and penalties (some carriers exclude these), forensic investigation costs, and ransomware response costs. Medical practices increasingly face ransomware attacks that encrypt patient records and demand payment to restore access.

Equipment breakdown coverage

Standard commercial property policies cover fire, theft, and weather — but they typically exclude mechanical breakdown. A dental X-ray machine that fails due to an electrical surge, or an MRI machine that breaks down due to a mechanical defect, would not be covered without equipment breakdown (boiler and machinery) coverage. For practices with expensive diagnostic equipment, equipment breakdown coverage is worth the premium.

Healthcare underwriting considerations

Healthcare commercial accounts are underwritten with attention to:

• Type of practice and services provided (some specialties — ambulatory surgery, birthing centers — are higher risk)
• Number of practitioners and support staff
• Annual revenue
• Prior professional liability claims
• EMR/EHR system and cybersecurity practices (for cyber coverage)
• Physician credentialing and quality of care processes

Capturing this information accurately during intake is key to placing healthcare accounts efficiently. A thorough intake form that includes questions about patient volume, services offered, and data security practices gives you everything you need to market the account effectively.

Healthcare intake that covers every line

AgencyAssist captures medical equipment values, EMR systems, patient volume, and cybersecurity controls — the data that drives accurate healthcare quotes.