Aipedia: Occupational health providers
OH professional indemnity usually covers negligent advice whether or not AI was used, but conditions about human decision making and exclusions for software and data breaches can leave gaps. NHS indemnity does not cover OH work for employers, so the right private cover matters.
Part of: AI in occupational health providers
In short
OH professional indemnity and medical malpractice arrangements usually respond to claims about the clinician's or provider's professional work, subject to their terms, whether or not AI helped. Gaps arise where help is limited to human decision making, where autonomous systems, software defects or data breaches are excluded, or where the OH company is not insured alongside its clinicians. NHS Resolution's CNSGP and ELSGP scope excludes occupational health and data protection breaches, and NHS employee indemnity excludes work for other organisations. Clinicians must hold indemnity by statute; OH companies have no statutory requirement but carry their own risk.
NHS Resolution's CNSGP and ELSGP scope table (December 2025) states that occupational health is not covered: staff tests and injections for employment are the employer's responsibility. The one exception is staff flu vaccination under the 2025/26 programme. Data protection breaches are also excluded. For NHS-employed clinicians, NHS Indemnity excludes Category 2 work such as reports for insurers, and work for other organisations. An NHS clinician doing private OH sessions therefore needs separate cover. See where NHS indemnity stops.
Individual doctors, nurses and HCPC registrants must hold indemnity by statute: Medical Act 1983 s44C, NMC Order article 12A and HSWPO article 11A, introduced by SI 2014/1887. No minimum limits are set. NMC Code 12.1 also requires nurses to have appropriate cover. No statutory PI requirement for an OH company was identified, and SEQOHS standards pages do not mention indemnity. That does not remove the company's exposure: employer clients usually contract with the company, and claims about systems such as AI triage or automated outcomes are aimed at the organisation.
No OH-specific regulator or insurer statement on AI was found. One medical defence organisation has published a general AI position that applies to its members, including OH doctors: help applies only where a human is the decision maker, and it excludes autonomous systems, software defects and data breaches. It also requires experts to tell instructing solicitors if AI was used in reports. Defence organisation help can be discretionary.
Insured OH professional indemnity and medical malpractice policies vary. Where a wording says nothing specific about AI, a negligent advice claim is usually treated the same whether or not a tool helped, subject to the policy terms. Others may contain conditions or exclusions about technology, data and cyber events. See AI exclusions and clauses.
| Situation | Possible gap |
|---|---|
| Outcome issued without clinician review | Conditions requiring a human decision maker |
| Tool malfunction causes wrong advice | Software defect exclusions |
| Health data leaked from an AI supplier | Data breach exclusions; may need cyber cover |
| Claim against the OH company over its system | Only individual clinicians insured |
| Third party injured after a clearance | Bodily injury limits in some PI wordings |
| Analytics or chatbot product | Clinical wording may not cover technology services |
Illustrative: an OH company's nurses use an AI tool to draft fitness-for-work reports and the company runs an automated triage system. A worker's urgent referral is delayed and a report contains unnecessary health detail. The worker and the employer both make claims. Each nurse holds individual cover, but the company has no entity policy, and the nurses' arrangements exclude data protection claims. The company faces the triage claim and the data complaint alone.
With an entity policy that covered professional services and data protection claims, and a review step that met any human decision maker condition, the same events would be more likely to fall within cover, subject to the terms.
Watch for NHS England and NHS Resolution indemnity guidance on AI; it is unclear how far it will reach private OH. Related: does PI cover AI mistakes, AI-enabled telehealth platforms, automated decisions under DUAA, AI rules for OH explained, run-off cover and the occupational health AI hub.
Apex arranges professional indemnity for OH companies and clinicians. A broker reviews whether both are covered and how your policy treats AI-assisted work; see OH professional indemnity.
Usually, if the claim is about negligent professional work and the policy has no relevant exclusion, subject to its terms. Gaps arise from conditions requiring a human decision maker and exclusions for software defects, autonomous systems and data breaches.
No statutory PI requirement for an OH company was identified, but individual clinicians must hold indemnity by statute. Employer clients contract with the company and claims about its systems are aimed at it, so entity cover is usually important.
No. The CNSGP and ELSGP scope states occupational health is not covered, apart from staff flu vaccination under the 2025/26 programme. Data protection breaches are also excluded, so OH work needs separate cover.
Usually yes. Insurers may ask about the services you provide and how you deliver them, and failing to disclose a material change could affect cover. Describe the tools, what they do and how clinicians review outputs.
Tell us about your practice and the work you do. A broker will review how your current cover treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start an indemnity quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.