Healthcare insurance UK: clinics, dental practices and care providers

What healthcare businesses get wrong

The most common gap we see is the assumption that clinician-level indemnity covers the business. It generally does not. A dentist, physiotherapist, aesthetic practitioner or nurse may hold personal indemnity through a medical defence organisation or a membership scheme; that arrangement responds for that individual. The claimant’s solicitor, however, will normally sue the corporate entity as well — as employer, as occupier, as the party that held the contract with the patient and as the data controller. If the company has no entity cover of its own, it defends that part of the claim from its own funds.

The second gap is treating professional indemnity and medical malpractice as interchangeable. A standard PI wording is built for advice and design — financial loss caused by professional error. Bodily injury arising from treatment is normally excluded from it. Medical malpractice wordings are the ones that respond to injury caused by clinical procedures, and healthcare businesses that also sell non-clinical services (training, consultancy, occupational health reports) frequently need both, arranged so the two meet rather than gap.

The third is abuse. Allegations of abuse or inappropriate conduct are among the most damaging claims a care provider or clinic can face, and abuse liability is very often excluded from public liability and malpractice wordings unless it is specifically written back, usually on restricted terms and a separate limit. It is worth knowing before an allegation arrives whether you have it at all.

The covers that matter for healthcare

Medical malpractice (entity cover). Responds to claims that treatment provided by or on behalf of the business caused injury. Two details matter more than the headline limit: who exactly is an insured person under the wording (employed clinicians, self-employed associates, locums, students on placement), and whether the policy is claims-made — because if it is, cover depends on the policy in force when the claim is notified, not when the treatment happened. Healthcare claims surface slowly, which makes continuous cover and retroactive dates unusually important in this sector.

Abuse liability. Where available, this covers defence and damages for allegations of abuse. Underwriters price it on your safeguarding and recruitment controls, and wordings vary widely on whether the alleged perpetrator is covered, whether cover falls away on conviction, and whether the limit is shared with the rest of the liability programme.

Regulatory investigation and legal defence costs. An inspection finding, an enforcement notice or a fitness-to-practise referral generates legal costs long before anyone sues. In England, providers of regulated activities must be registered with the Care Quality Commission under the Health and Social Care Act 2008, and carrying on a regulated activity without registration is a criminal offence; separate regulators apply in Scotland, Wales and Northern Ireland. Cover for the cost of responding — legal representation at an inspection, an interview under caution, a fitness-to-practise hearing — is bought as an extension, not assumed. Fines and penalties themselves are generally not insurable.

Cyber and patient data. Clinical records are special category personal data, and a healthcare breach brings forensic cost, notification to affected patients, regulator engagement and, increasingly, claims from individuals. Practice management systems, imaging archives and appointment platforms are all in scope, including where they are hosted by a supplier. Our commercial cyber guide sets out what these wordings actually do.

Employers’ and public liability. Employers’ liability is compulsory once you employ staff, with a statutory minimum limit of £5 million — see employers’ liability insurance. Public liability covers injury and damage to patients and visitors that is not treatment related: slips in the waiting room, a hoist failure, damage to a resident’s property.

Property, equipment and business interruption. Clinical equipment is expensive and often on finance; chairs, imaging kit, lasers and sterilisers are hard to replace quickly. Business interruption should be set on a realistic indemnity period — long enough to refit clinical space and re-register premises where that is required, not the twelve months that gets typed in by default.

The underwriting questions this sector gets asked

Expect a healthcare submission to be interrogated on scope rather than turnover. Underwriters want the list of procedures actually performed and by whom; the split between employed staff, self-employed associates and locums, and whether each carries their own indemnity at what limit; supervision and chaperone arrangements; recruitment and vetting processes; how complaints and incidents are logged and escalated; the last inspection outcome and any conditions on registration; the age profile of clinical equipment and its servicing records; and where patient data sits, who can access it and how it is backed up.

Answering those precisely is not box-ticking. In a claims-made market with a long tail, the accuracy of the presentation is what protects the policy later. Getting the procedure list wrong is how a clinic discovers that the treatment giving rise to the claim was never declared.

What a broker does differently here

The work is mostly about mapping who is insured for what. We start by drawing the actual legal structure — which entity holds the patient contract, which employs the staff, which owns or leases the premises — and then check that the malpractice, abuse, PI and liability wordings name the right parties and meet at the edges. We check retroactive dates and run-off before a renewal moves insurer, because that is where continuity is lost. We check whether regulatory defence costs erode the liability limit or sit alongside it. And we look at what your own contracts with commissioners, insurers and associates already oblige you to carry, since those obligations often set the limits, not the risk.

Apex is Bristol-based and FCA-regulated. We are insurance brokers, not clinical or regulatory advisers: we will tell you what a policy responds to and where it does not, and leave clinical governance and registration compliance to the people qualified to advise on them. If your structure spans several sites or entities, our complex commercial insurance page explains how we handle larger programmes.

Frequently asked questions

Does my clinicians’ personal indemnity cover the practice?

Usually not. Indemnity held by an individual through a defence organisation or a membership scheme responds for that individual. Claimants routinely also sue the company as employer, occupier, contracting party and data controller, and that part of the claim needs entity-level cover of its own. Check the wording rather than assuming, and check it again whenever your associates’ arrangements change.

Is medical malpractice the same as professional indemnity?

No. Professional indemnity wordings are built around financial loss caused by advice or professional services and normally exclude bodily injury from treatment. Medical malpractice is the wording that responds to injury arising from clinical care. Businesses that treat patients and also provide non-clinical services — training, reports, consultancy — often need both, arranged so neither leaves a gap.

Will insurance pay a regulatory fine?

You should not plan on it. Fines and penalties imposed by a regulator are generally treated as uninsurable as a matter of public policy in the UK, and wordings reflect that. What can be insured is the cost of responding: legal representation during an investigation or inspection, at an interview under caution, or at a fitness-to-practise or licensing hearing. That is bought as a specific extension and is worth checking you have.

Do we need abuse cover if we already have public liability?

Public liability and malpractice wordings very often exclude abuse, so having them does not mean you are covered. Where abuse liability is available it is usually written back on a separate, lower limit with its own conditions, and underwriters will want to see your safeguarding and recruitment controls. For any provider working with children or vulnerable adults it is one of the first things to confirm, not the last.

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority (FRN 724952). This page is general information, not advice on a specific policy.