Medical Office Insurance · April 21, 2026
5 Coverage Gaps Most Medical Offices Don’t Know They Have
By Seann McWhorter · Insure Right Insurance Agency, LLC
HealthcareRisk ManagementMedical MalpracticeCyber Liability
Running a medical practice means navigating complex regulations, demanding patients, and a staff that depends on you. Insurance is often the last thing on your mind — until something goes wrong. The problem? Most standard insurance programs sold to medical offices leave dangerous gaps that only become visible at claim time. Here are the five most common ones — and the questions you should be asking your agent right now.
Gap #1
Cyber Liability & HIPAA Data Breach Coverage
Medical offices are among the most targeted industries for cyberattacks. You store protected health information (PHI) — patient names, Social Security numbers, diagnoses, billing data — all of which are extraordinarily valuable to criminals. A single data breach can trigger HIPAA notification requirements, regulatory fines, credit monitoring costs, and patient lawsuits.
Most general liability and BOP (Business Owner’s Policy) policies provide little to no meaningful cyber coverage. A standalone cyber liability policy fills this gap by covering breach response costs, legal fees, regulatory fines, and even ransomware extortion payments.
💡 Ask your agent: “Does my current policy include first-party cyber coverage for breach notification and ransomware? What is the sublimit?” Many BOPs include cyber endorsements with limits as low as $10,000 — far below the average $200,000+ cost of a healthcare data breach.
Gap #2
Tail Coverage on Claims-Made Malpractice Policies
Professional liability (malpractice) insurance for physicians typically comes in two forms: occurrence and claims-made. Most policies sold today are claims-made — meaning coverage only applies if both the incident and the claim occur while the policy is active.
When a physician retires, leaves a practice, or switches carriers, any claims filed after the policy ends — even for incidents that occurred while it was active — will not be covered unless tail coverage (also called an “Extended Reporting Period”) is purchased. This gap catches many providers completely off guard at retirement or transition.
💡 Ask your agent: “Is my malpractice policy claims-made or occurrence-based? If claims-made, what does tail coverage cost, and who is responsible for buying it — the physician or the practice?”
Gap #3
Business Interruption — Underestimated Limits
If a fire, flood, or major equipment failure forces your practice to temporarily close, business interruption insurance replaces lost revenue while you recover. Most medical offices carry this coverage — but many carry limits that are far too low.
A typical general practice can generate $30,000–$80,000 or more per month in revenue. If your business interruption limit is set at $50,000 and your recovery takes four months, you’ll be covering the difference out of pocket. Many policies also have 72-hour waiting periods before coverage kicks in, and some exclude losses from utility outages or equipment breakdowns unless specifically endorsed.
💡 Ask your agent: “What is my business interruption limit, and how long does the coverage period extend? Does it include equipment breakdown? Is there a waiting period before it triggers?”
Gap #4
Employment Practices Liability (EPLI)
Medical offices are employers — often with a mix of clinical staff, front-desk personnel, billing teams, and contractors. This creates significant exposure to employment-related claims: wrongful termination, workplace harassment, discrimination, failure to promote, and wage disputes.
These claims are not covered by general liability or professional liability policies. Employment Practices Liability Insurance (EPLI) fills this gap. Without it, a single disgruntled employee lawsuit can cost tens of thousands of dollars in legal fees alone — even if the practice ultimately wins.
💡 Ask your agent: “Do I have EPLI coverage? If it’s included as a BOP endorsement, what is the limit? Is there a separate deductible, and does it cover third-party claims from patients?”
Gap #5
Telemedicine & Off-Site Liability Exposure
Telemedicine has exploded in adoption since 2020, and many practices now see patients via video, phone, or app-based platforms. What most providers don’t realize is that standard malpractice policies may have geographic restrictions or exclude services provided across state lines.
If your practice sees patients in multiple states via telehealth, you may need to be licensed — and insured — in each of those states. Similarly, if physicians or staff perform services at satellite locations, nursing homes, or patients’ homes, those off-site activities may not be covered under the main practice’s policy.
💡 Ask your agent: “Does my malpractice policy explicitly cover telemedicine? Are there restrictions on out-of-state patients? Are off-site services covered, or do I need a separate endorsement?”
Is Your Practice Fully Protected?
The best time to find a coverage gap is before you have a claim. A comprehensive insurance review can identify exposures you may not even be aware of — and often, the right coverage costs less than you’d expect.
At Insure Right Insurance Agency, we specialize in helping medical practices build complete, cost-effective insurance programs tailored to their specific needs.
Seann McWhorter | Insure Right Insurance Agency, LLC
📞 (801) 407-8360 | ✉ [email protected]
831 E 349 S, Suite 200, American Fork, UT 84003
This article is intended for general informational purposes only and does not constitute legal or insurance advice. Coverage availability and terms vary by carrier and state. Consult a licensed insurance professional for advice specific to your practice.
Plugging the Gaps: Insurance Coverages Plumbing Contractors Are Likely Overlooking
The E-Bike Insurance Gap: What Your Current Policies Don't Cover (and How to Fix It)
