Reviewed by Matthew Bartlett, Director · Last reviewed 9 July 2026
Healthcare companies — private hospitals, primary care groups, care home operators, dental groups, digital health providers and clinical-diagnostic services — carry director-level exposure that runs from Care Quality Commission investigation through to individual professional-body referral of executives. This entry sets out how D&O responds to CQC action, where GMC and NMC referrals reach into the boardroom, the clinical governance liability that attaches to directors, and how D&O aligns with medical malpractice, employer’s liability and product liability cover.
The Companies Act 2006 general duties apply to healthcare company directors on the same terms as any other sector. On top of that, the Care Quality Commission regulates providers of regulated activities in England under the Health and Social Care Act 2008 and can pursue individuals as well as the corporate provider — section 91 gives the CQC the power to impose penalty notices and section 32 sets the offence of failing to comply with a warning notice. A prosecution or a warning notice against the registered manager, the nominated individual, or a director will produce a personal defence cost that D&O is designed to meet.
Individual clinician directors carry a parallel exposure through their professional bodies. A GMC fitness-to-practise investigation of a medical-director executive, or an NMC investigation of a nurse-director, is a personal proceeding regardless of the corporate role. Where the executive is also a company director, D&O can respond to the defence-cost element (subject always to the wording of the ‘insured person’ definition and the ‘wrongful act’ trigger).
Clinical governance liability — a board-level allegation of failing to oversee a clinical service safely, or of misrepresenting inspection outcomes to buyers, patients or investors — is a growing head of claim as private-equity investment into healthcare has consolidated ownership.
Side A covers the individual director when the company cannot or will not indemnify. Side B reimburses the company for indemnifying its directors. Side C responds to securities claims for listed healthcare companies. Extensions worth attention include pre-claim investigation costs (CQC, HSE, professional-body enquiries), employment practices liability, outside directorship, and where available specific extensions for reputation-management costs and regulator interview attendance.
Deliberate dishonesty, fraud and improper personal profit are excluded once established by final adjudication. Prior known circumstances are excluded — and given the depth of CQC inspection documentation, incident-reporting logs and clinical audits, the fair-presentation obligation at proposal is broad. Bodily injury and property damage sit on medical malpractice and public liability. Fines and penalties that are not insurable as a matter of English public policy fall outside cover. Claims by one insured against another are excluded save for standard carve-outs.
Health and Social Care Act 2008 and the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 — regulation 5 (fit and proper persons), regulation 12 (safe care and treatment), regulation 20 (duty of candour). CQC enforcement policy and Health and Social Care Act 2008 sections 32 and 91. Medical Act 1983 (GMC framework). Nursing and Midwifery Order 2001 (NMC framework). Health Professions Order 2001 (HCPC framework). Companies Act 2006 sections 171-177. Insolvency Act 1986 sections 213-214. Corporate Manslaughter and Corporate Homicide Act 2007. Care Standards Act 2000 (residual application). Insurance Act 2015 sections 3, 7 and 8. UK GDPR for special-category personal data.
D&O covers the director’s decisions in running the healthcare company — oversight of clinical governance, staff recruitment and training, procurement of clinical services, disclosures to CQC and investors. Medical malpractice cover responds to a claimant patient’s claim of negligent treatment. Where a corporate provider is sued for a clinical incident and the directors are separately named for their oversight failures, D&O picks up the individual defence while medical malpractice picks up the underlying patient claim. A specialist broker aligns the wordings across all three towers.
A multi-site care home group receives a CQC warning notice under section 29 of the Health and Social Care Act 2008 following an inspection that raised safe-care and duty-of-candour concerns under regulations 12 and 20 of the 2014 Regulated Activities Regulations. The nominated individual, the registered manager and two executive directors are named in the subsequent CQC correspondence. Personal defence of the individual positions through the representation period, any subsequent enforcement escalation, and the private-equity investor’s separate warranty-and-indemnity claim falls on the D&O tower. Side A responds to the individual defence where the company’s indemnity is limited or not lawfully available; Side B reimburses the company where indemnity is provided. Pre-claim investigation costs pick up counsel from the day the warning notice arrives.
D&O policies are almost always claims-made. Where a CQC warning notice, a professional-body referral, a serious incident report or a private-equity investor concern letter lands during a policy year, that circumstance needs to reach the broker before the year ends. Late notification is the single most common reason a real D&O claim gets declined. The th