Occupational health
Yes. OH physicians and OH nurses must have indemnity by law: the GMC requires adequate and appropriate cover for all of a doctor’s practice, including private work, and the NMC removes from its register a nurse found practising without an appropriate arrangement. Non-clinical OH advisers are outside those rules, but employers expect PI. Clinical work also needs medical malpractice cover, because PI written for consultants commonly excludes injury and treatment.
Part of: Professional indemnity for consultants
In short
OH physicians must hold appropriate indemnity under section 44C of the Medical Act 1983, and the GMC says it must cover private and independent work too. OH nurses must have an appropriate indemnity arrangement whenever they practise and declare it to the NMC, and an employer’s arrangement covers only that employment. The largest claims usually come through employers: fitness-for-work and adjustment advice that ends in disability discrimination claims under the Equality Act 2010, missed findings in health surveillance for noise or hazardous substances, and mishandled health data, which is special category data. Clinical procedures need malpractice cover alongside PI.
Last reviewed 5 October 2026 by the Apex professional indemnity team.
Occupational health (OH) sits between an employer and its workforce. You assess fitness for work, advise on adjustments, run health surveillance, and sometimes vaccinate or test. The employer acts on your report, so when the report is wrong the loss usually lands on the employer first and on you second.
Two kinds of cover matter. Professional indemnity (PI) answers allegations that your advice or report was negligent and cost the employer money, such as a tribunal award it paid after following your recommendation. Clinical work is different: a vaccination reaction, a missed finding at a medical or an injury during testing is a bodily injury claim, and a PI policy written for consultants commonly excludes injury and treatment altogether. Clinicians need medical malpractice cover that names the clinical procedures they carry out, with public liability for accidents at clinics and client sites.
Each scenario below is illustrative, written to show a pattern of allegation rather than to describe a real case.
Most of these reach you through the employer. The worker sues the employer, the employer looks at the advice it relied on, and your report becomes the evidence.
| Law or standard | What it says | Why it matters to an OH consultant |
|---|---|---|
| Medical Act 1983, s.44C, and GMC guidance | A licensed doctor who practises must have an indemnity arrangement giving appropriate cover for the nature and extent of the risks. The GMC says it must cover the full scope of your UK practice, including private or independent work, even on NHS premises. | The GMC can remove a licence from a doctor who lacks adequate and appropriate cover. |
| NMC indemnity requirement | Nurses must have an appropriate indemnity arrangement whenever they practise, relevant to the risks of their practice. Self-employed nurses and consultants will probably need their own, and an employer’s arrangement covers only that employment. | A nurse found practising without one will be removed from the register. |
| Equality Act 2010, ss.6, 15, 20 and 21 | Defines disability, prohibits unfavourable treatment because of something arising from a disability, and requires reasonable adjustments. Failing to make them is discrimination. | Fitness-for-work and adjustment advice is judged by what the employer did with it. |
| Equality Act 2010, s.60 | An employer must not ask about an applicant’s health before offering work, subject to limited exceptions. | Pre-placement assessments belong after the offer. |
| HSE health surveillance guidance | The law requires health surveillance where workers remain exposed to health risks such as noise, vibration and hazardous substances after controls are in place. Health records must be kept for the period the regulations set, for example 40 years under COSHH. | Surveillance findings can be examined decades later. |
| UK GDPR and ICO employment guidance | Workers’ health information is special category data, needing an Article 9 condition as well as a lawful basis. An OH provider acting in its professional capacity is likely to be a controller. | You carry your own data protection duties, including subject access requests. |
| Usually covered by PI | Often excluded or limited | Needs a different policy |
|---|---|---|
| Employer claims over negligent fitness-for-work or adjustment advice | Bodily injury from clinical procedures, unless malpractice cover is included | Vaccination, testing and examination injuries (medical malpractice) |
| Errors in health surveillance reports and referrals | Work in sectors or procedures you did not declare, such as appointed doctor medicals | A worker who trips at your clinic or a client site (public liability) |
| Workers’ confidentiality and data protection claims, on many wordings | Fines and penalties | Ransomware on your clinical records system (cyber) |
| Defence costs, including expert OH evidence | Contractual indemnities that go beyond your liability at law | Claims from your own employees (employers’ liability) |
| Costs of responding to a GMC or NMC investigation, where the policy includes them | Claims notified after the policy ends, unless run-off is in place | Theft of or damage to audiometers and spirometers (equipment cover) |
The insurer’s acceptance of your proposal and the wording decide what is paid. Say exactly which services you offer, from telephone assessments to audiometry, spirometry, drug and alcohol testing and vaccinations, because OH wordings often list covered activities one by one.
An OH report is often tested in an employment tribunal rather than a clinic. A worker is disabled under the Equality Act 2010 if they have a physical or mental impairment with a substantial and long-term adverse effect on their ability to carry out normal day-to-day activities. Once that applies, the employer must make reasonable adjustments and must not treat the worker unfavourably because of something arising from the disability unless it can justify it.
Your report shapes all of this in three ways:
Answer the question the referral asks, separate your clinical opinion from decisions that belong to the employer, and record what evidence you saw. If a referral asks you to say whether the Act applies, explain the clinical features relevant to that test and leave the conclusion to the employer.
Health surveillance is a programme of repeated checks, such as hearing tests, lung function or skin inspections, used to identify ill health caused by work. HSE says schemes should usually be set up with input from a competent OH professional, and for asbestos, lead and ionising radiation the law requires medical surveillance by an HSE appointed doctor, with one exception for some lower-risk asbestos work.
Records create the long tail. Employers keep health records, which should not contain confidential medical information without the worker’s written consent, for at least the period the regulations set: 40 years under COSHH. Medical records stay in medical confidence with the OH professional, and when an employer changes provider they should transfer. An occupational disease claim can therefore draw on your results long after the contract ends.
Confidentiality is a separate exposure. The ICO says that as far as possible the OH adviser should hold the medical information and tell the manager only the outcome of the assessment, and that releasing medical details to non-medical staff generally needs the worker’s explicit consent. If you ask a worker’s GP or treating specialist for a report, the Access to Medical Reports Act 1988, or its Northern Ireland equivalent, applies.
The regulators set the standard, not the number. The GMC asks for adequate and appropriate cover for the full scope of a doctor’s practice, and the NMC for cover relevant to the risks, sufficient if a claim succeeds. The figure usually comes from employer contracts and framework agreements, and should reflect your largest clients: one report on a senior employee, or a surveillance programme across a whole workforce, can underpin a substantial claim.
OH insurance is commonly written claims-made, so the policy that answers a hearing loss claim brought years from now is the one you hold then, not the one in force when you ran the audiometry. Keep your retroactive date when you change insurer, keep cover running between contracts, and arrange run-off cover if you retire or sell the practice.
A complete proposal gets better terms than a bare one, and a broker can only present what you tell us. Have these ready:
Speak to a broker
PI for occupational health consultants, placed by a named broker
Start the online proposal and save it as you go, or leave your number and a named broker will call you back, usually the same working day.
Apex Insurance Brokers is an independent insurance broker based in Bristol, established in 2009 and authorised and regulated by the Financial Conduct Authority. We are not tied to one insurer: we work with over 30 markets, including Lloyd’s syndicates through wholesale brokers, and every client has a named broker who handles the placement, mid-term changes, certificates for clients and the renewal.
See also: AI in occupational health: rules, risks and PI
Yes. OH physicians and nurses must have appropriate indemnity to practise, and employers expect PI from non-clinical OH advisers too. PI answers employer claims over negligent fitness-for-work, adjustment or surveillance advice, subject to the policy terms, while clinical procedures such as vaccinations need medical malpractice cover.
For doctors and nurses, yes. Section 44C of the Medical Act 1983 requires licensed doctors who practise to have appropriate indemnity, and the NMC requires nurses to have an appropriate indemnity arrangement whenever they practise and to declare it when they join or renew. Non-clinical OH advisers are not covered by these rules, but employer clients usually make PI a contract condition.
Yes. If the employer relied on your report when it refused adjustments or dismissed a worker, it may allege your advice was negligent and claim its award and costs from you. Your PI should respond to that allegation, subject to its terms, so describe adjustment and fitness-for-work advice clearly on your proposal.
Usually not. The NMC says an employer’s arrangement covers only your work in that employment, and the GMC says private or independent practice needs its own adequate and appropriate cover, even on NHS premises. Sessional and self-employed OH work usually needs its own cover.
Longer than most consultants. HSE says health records must be kept for the period the regulations set, which is 40 years under COSHH, and occupational disease claims can surface many years later. Because cover is claims-made, keep it running and arrange run-off when you stop.
Only with care. The ICO says the OH adviser should, as far as possible, hold the medical information and give the manager the outcome of the assessment, and that releasing medical details to non-medical staff generally needs the worker’s explicit consent. As a likely controller, you also handle subject access requests.
Apex arranges professional indemnity insurance for occupational health consultants across the UK. Tell us about your work and we’ll find cover that fits. Or call 0117 325 0027.
Start your PI proposal Call 0117 325 0027Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information, not advice on your individual circumstances. Cover is always subject to the insurer’s acceptance and the policy terms, and this page does not guarantee that cover will be available or on what terms.