A medical or dental practice is a clinical operation and a small business at the same time. Malpractice covers the clinical side, and that is its own subject handled with your malpractice carrier. This article stays on the business insurance layer: the property, data, staff, and operations that keep the practice running. Those exposures are real, and they sit outside malpractice.
Cyber and HIPAA exposure
Practices hold protected health information, which makes a breach both expensive and sensitive under frameworks like HIPAA. Cyber coverage generally addresses breach response, notification, and related costs that other policies usually exclude. Given how much patient data a modern office stores and transmits, this is often the most important piece of the business layer.
A business owners policy
A business owners policy, or BOP, generally bundles general liability with property coverage for your contents and equipment. For an office with a waiting room, front desk, and clinical gear, it handles everyday exposures: a patient who slips in the lobby, or damage to your equipment. It is the workhorse of the business side.
Workers comp
If you employ staff, workers compensation is generally required and responds to work-related injuries and illness. Clinical and front-desk roles both carry exposure, from needlesticks to repetitive strain, and this coverage sits entirely apart from malpractice.
EPLI
Employment practices liability generally responds to claims like discrimination, harassment, or wrongful termination. Even a small team creates this exposure, and it is not picked up by malpractice or general liability. Many practices add it once they have staff.
Billing errors
Billing and coding mistakes can create exposure separate from clinical care. Depending on the setup, this may be addressed through a management liability or specialized policy. Confirm where, if anywhere, your program responds, since it is easy to assume it lives somewhere it does not.
Questions to ask your advisor
- Does our cyber coverage address a breach of patient health information?
- Is our property and general liability handled through a BOP or separate policies?
- Is our workers comp current for both clinical and front-desk staff?
- Do we carry EPLI for our employment exposures?
- Where, if anywhere, does our program respond to billing errors?
Malpractice is only half the picture. The business layer, cyber, property, workers comp, and employment coverage, protects the practice as a business. A short review maps those pieces to how your office actually runs, so a breach or an employment claim does not catch you without cover.
Want guidance first? Compare your coverage. Already know what you need? Get a quote.