FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Apex Insurance Brokers
Speak to a brokerGet a quote →

Aipedia: Occupational health providers

Does occupational health indemnity cover AI mistakes?

OH professional indemnity usually covers negligent advice whether or not AI was used, but conditions about human decision making and exclusions for software and data breaches can leave gaps. NHS indemnity does not cover OH work for employers, so the right private cover matters.

In short

OH professional indemnity and medical malpractice arrangements usually respond to claims about the clinician's or provider's professional work, subject to their terms, whether or not AI helped. Gaps arise where help is limited to human decision making, where autonomous systems, software defects or data breaches are excluded, or where the OH company is not insured alongside its clinicians. NHS Resolution's CNSGP and ELSGP scope excludes occupational health and data protection breaches, and NHS employee indemnity excludes work for other organisations. Clinicians must hold indemnity by statute; OH companies have no statutory requirement but carry their own risk.

Why NHS indemnity does not help

NHS Resolution's CNSGP and ELSGP scope table (December 2025) states that occupational health is not covered: staff tests and injections for employment are the employer's responsibility. The one exception is staff flu vaccination under the 2025/26 programme. Data protection breaches are also excluded. For NHS-employed clinicians, NHS Indemnity excludes Category 2 work such as reports for insurers, and work for other organisations. An NHS clinician doing private OH sessions therefore needs separate cover. See where NHS indemnity stops.

Who must hold cover

Individual doctors, nurses and HCPC registrants must hold indemnity by statute: Medical Act 1983 s44C, NMC Order article 12A and HSWPO article 11A, introduced by SI 2014/1887. No minimum limits are set. NMC Code 12.1 also requires nurses to have appropriate cover. No statutory PI requirement for an OH company was identified, and SEQOHS standards pages do not mention indemnity. That does not remove the company's exposure: employer clients usually contract with the company, and claims about systems such as AI triage or automated outcomes are aimed at the organisation.

How defence organisation and insured PI treat AI

No OH-specific regulator or insurer statement on AI was found. One medical defence organisation has published a general AI position that applies to its members, including OH doctors: help applies only where a human is the decision maker, and it excludes autonomous systems, software defects and data breaches. It also requires experts to tell instructing solicitors if AI was used in reports. Defence organisation help can be discretionary.

Insured OH professional indemnity and medical malpractice policies vary. Where a wording says nothing specific about AI, a negligent advice claim is usually treated the same whether or not a tool helped, subject to the policy terms. Others may contain conditions or exclusions about technology, data and cyber events. See AI exclusions and clauses.

Where gaps can appear

SituationPossible gap
Outcome issued without clinician reviewConditions requiring a human decision maker
Tool malfunction causes wrong adviceSoftware defect exclusions
Health data leaked from an AI supplierData breach exclusions; may need cyber cover
Claim against the OH company over its systemOnly individual clinicians insured
Third party injured after a clearanceBodily injury limits in some PI wordings
Analytics or chatbot productClinical wording may not cover technology services

Illustrative scenario

Illustrative: an OH company's nurses use an AI tool to draft fitness-for-work reports and the company runs an automated triage system. A worker's urgent referral is delayed and a report contains unnecessary health detail. The worker and the employer both make claims. Each nurse holds individual cover, but the company has no entity policy, and the nurses' arrangements exclude data protection claims. The company faces the triage claim and the data complaint alone.

With an entity policy that covered professional services and data protection claims, and a review step that met any human decision maker condition, the same events would be more likely to fall within cover, subject to the terms.

What to check

Watch for NHS England and NHS Resolution indemnity guidance on AI; it is unclear how far it will reach private OH. Related: does PI cover AI mistakes, AI-enabled telehealth platforms, automated decisions under DUAA, AI rules for OH explained, run-off cover and the occupational health AI hub.

How Apex helps

Apex arranges professional indemnity for OH companies and clinicians. A broker reviews whether both are covered and how your policy treats AI-assisted work; see OH professional indemnity.

Sources

Frequently asked

Does OH professional indemnity cover mistakes made with AI?

Usually, if the claim is about negligent professional work and the policy has no relevant exclusion, subject to its terms. Gaps arise from conditions requiring a human decision maker and exclusions for software defects, autonomous systems and data breaches.

Do OH companies have to hold PI?

No statutory PI requirement for an OH company was identified, but individual clinicians must hold indemnity by statute. Employer clients contract with the company and claims about its systems are aimed at it, so entity cover is usually important.

Does CNSGP cover OH work in a GP practice?

No. The CNSGP and ELSGP scope states occupational health is not covered, apart from staff flu vaccination under the 2025/26 programme. Data protection breaches are also excluded, so OH work needs separate cover.

Should we tell our insurer we use AI?

Usually yes. Insurers may ask about the services you provide and how you deliver them, and failing to disclose a material change could affect cover. Describe the tools, what they do and how clinicians review outputs.

Check your indemnity covers how you use AI

Tell us about your practice and the work you do. A broker will review how your current cover treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.

Start an indemnity quote Request a callback

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.