Healthcare operations carry a unique intersection of professional liability, regulatory exposure, and employee injury risk that generic insurance programs don't address. We build coverage programs specifically for medical offices, clinics, home health agencies, skilled nursing facilities, and allied health providers across California.
Healthcare businesses face a layered set of insurance requirements driven by state licensing, federal regulations, payer contracts, and the inherent risks of treating patients. A comprehensive healthcare insurance program typically includes multiple coordinated policies — and the gaps between those policies are where the most damaging claims emerge.
Professional liability — commonly called malpractice insurance — is the foundational coverage for any healthcare provider. In California, the Medical Board of California does not mandate minimum malpractice coverage amounts, but hospital credentialing, managed care contracts, and practice group agreements almost universally require it. Standard minimums are $1,000,000 per occurrence and $3,000,000 aggregate, though surgical specialties and facilities often need higher limits.
California's Medical Injury Compensation Reform Act (MICRA) historically capped non-economic damages in medical malpractice cases at $250,000. Assembly Bill 35, effective January 2023, increased this cap to $350,000 for non-death cases and $500,000 for wrongful death, with annual increases of $40,000-$50,000 until 2033. This directly impacts premium calculations and coverage adequacy.
Healthcare facilities need commercial general liability for premises-related claims — a patient slipping in a waiting room, a visitor injured in the parking lot, or property damage from a facility malfunction. This coverage is separate from professional liability and applies to incidents unrelated to medical treatment.
Healthcare workers face significant occupational hazards. Needle sticks, patient handling injuries, workplace violence, and exposure to infectious disease are all common. According to the Bureau of Labor Statistics, healthcare workers experience workplace injuries at rates higher than construction and manufacturing. Key California workers' comp class codes for healthcare include:
Patient handling injuries — back strains, shoulder injuries, and musculoskeletal disorders from lifting, repositioning, and transferring patients — account for the majority of workers' comp claims in healthcare. California's Cal/OSHA has specific safe patient handling regulations that, when followed, dramatically reduce these claims.
Healthcare providers are primary targets for data breaches and ransomware attacks. Protected health information (PHI) is among the most valuable data on the black market, and HIPAA penalties for breaches can reach $1.5 million per violation category per year.
A healthcare-specific cyber liability policy covers breach notification costs (California requires notification under the California Consumer Privacy Act), forensic investigation, credit monitoring for affected patients, regulatory defense costs, and business interruption from system downtime. Standard GL policies exclude cyber events entirely.
For practices using electronic health records, telehealth platforms, or connected medical devices, cyber coverage isn't optional — it's a financial necessity. The average healthcare data breach costs over $10 million according to IBM's annual Cost of a Data Breach Report, and small practices are increasingly targeted because they lack enterprise security infrastructure.
Healthcare operations face elevated employment practices exposure due to high-stress work environments, shift scheduling disputes, hierarchical workplace structures, and the physical demands placed on staff. Claims of harassment, discrimination, wrongful termination, and retaliation are disproportionately common in healthcare settings. Employment Practices Liability Insurance (EPLI) covers defense costs and settlements for these claims — coverage that is not included in standard GL or professional liability policies.
Our healthcare practice covers the full spectrum of California providers — physician offices (single practitioner through large multi-specialty groups), urgent care centers, outpatient surgery centers, dental and orthodontic practices, physical therapy and rehabilitation clinics, home health agencies, skilled nursing facilities, assisted living communities, behavioral health and substance abuse treatment facilities, and clinical laboratories. Each facility type carries distinct coverage requirements and we structure programs accordingly.
Risk management in healthcare isn't just about insurance — it's about building the systems that prevent incidents from happening and minimize damage when they do. We provide our healthcare clients with proactive risk management support that goes beyond what most brokers offer.
Credentialing and contract review: We review managed care contracts and hospital credentialing requirements to ensure your coverage limits, endorsements, and policy structure meet every contractual obligation. A coverage gap discovered during a credentialing audit can delay revenue for months.
Incident response protocols: When a patient adverse event occurs, the first 48 hours determine whether it becomes a minor incident or a seven-figure lawsuit. We help you establish clear response protocols — documentation procedures, communication guidelines, and early reporting to your carrier — that protect your interests from the moment an incident is identified.
Workplace safety programs: We develop Cal/OSHA-compliant Injury and Illness Prevention Programs specifically for healthcare environments, including safe patient handling protocols, sharps injury prevention, workplace violence prevention plans (required under SB 1299 for California hospitals and certain healthcare facilities), and infectious disease exposure control plans.
Claims advocacy: When claims arise — whether professional liability, workers' comp, or employment practices — we serve as your advocate with the carrier. We monitor reserves, push for timely resolution, and ensure your interests aren't sacrificed for the carrier's convenience.
At minimum: medical professional liability (malpractice), commercial general liability, workers' compensation, commercial property, cyber liability, and business auto if applicable. Most managed care contracts also require specific limits and endorsements. We recommend adding EPLI and umbrella coverage for comprehensive protection.
Premiums vary dramatically by specialty, claims history, and location. Internal medicine and family practice typically pay $5,000-$15,000/year. OB/GYN and surgical specialties can run $30,000-$80,000+. California's MICRA reforms have historically kept malpractice rates lower than many states, though AB 35's cap increases are gradually affecting premiums.
While not legally mandated, HIPAA's breach notification requirements and potential penalties of up to $1.5 million per violation category make cyber liability effectively essential. Many managed care contracts now require it. The average healthcare data breach costs over $10 million, and standard GL policies exclude cyber events entirely.
The Medical Injury Compensation Reform Act (MICRA) caps non-economic damages in medical malpractice cases. Originally $250,000, AB 35 increased it to $350,000 for non-death cases and $500,000 for wrongful death effective 2023, with annual increases until 2033. These caps keep California malpractice premiums lower than many states but are gradually rising.
Yes. Home health agencies face unique exposures including employee driving risk (commercial auto), theft allegations at patient homes, and higher workers' comp exposure from patient handling without facility equipment. They also need professional liability tailored to home-based care and may need surety bonds depending on licensing requirements.
Common California healthcare codes include 8833 (hospital professional employees), 8832 (physician/clerical), 8829 (skilled nursing), 8835 (home health aides), and 9040 (hospital non-professional). Proper classification is critical — a nurse classified under a general clerical code will generate an audit deficiency, while a receptionist on a nursing code means overpayment.
Talk to an advisor who actually understands your industry. No call centers, no generic quotes — a real conversation about your business.
Start a conversation