Medical Office Insurance California: Coverage for Private Practices and Clinics

In 2026, the California Supreme Court ruled in J.M. v. Illuminate Education that plaintiffs suing under the Confidentiality of Medical Information Act can show negligent release if medical data faced a significant risk of unauthorized access. The court dismissed the case against Illuminate because it was not a covered healthcare provider, as detailed in Nixon Peabody’s analysis. To address these evolving operational, physical, and patient-data risks, Old Harbor Insurance provides comprehensive medical office insurance tailored for California practices.

Most practices already carry medical malpractice coverage for clinical claims, but the office, equipment, staff, and patient data create separate exposures malpractice insurance was never designed to cover. A useful review starts by separating clinical liability from the risks of operating the business, then checking which legal entities and locations appear on each policy. If the practice has added providers, telehealth, another location, or an MSO since its last review, Old Harbor can help determine which policies and entities need attention.

What Medical Office Insurance Covers in California

Coverage at a Glance

• General liability: Patient or visitor injury at the office, unrelated to clinical care
• Medical malpractice / professional liability: Claims tied to diagnosis, treatment, or clinical judgment
• Property: The building, medical equipment, and tenant improvements
• Cyber liability: Breach of patient records and required breach notification costs
• Employment practices liability: Discrimination, harassment, or wrongful termination claims from staff
• Workers’ compensation: Required for practice employees

General Liability Doesn’t Reach Clinical Decisions

General liability and medical malpractice cover different things, and the split trips up a lot of new practice owners. General liability responds to the everyday accidents of running an office: a patient’s fall in the waiting room, a visitor injured on an icy walkway, damage a contractor causes during a remodel.

 It doesn’t extend to a claim about a missed diagnosis, a medication error, or any other decision made in the course of treating a patient, which is what medical malpractice, sometimes called professional liability, exists to cover. A standard business owner’s policy bundles property and general liability together, but it doesn’t include malpractice, and a practice relying on one without the other has a real gap the moment a clinical claim is filed.

Cyber Liability Matters More Under a Lower Breach Standard

The California Supreme Court’s Illuminate Education ruling didn’t just lower the bar for proving a breach occurred. It also confirmed that CMIA violations carry nominal statutory damages of $1,000 per violation without the plaintiff having to prove actual harm, which raises the stakes for class action claims tied to a breach of patient records.

 Cyber liability coverage, which typically pays for breach notification, credit monitoring, and legal defense, is what a practice leans on when a records breach happens, and a limit set years ago under the old standard is worth revisiting now that the litigation math has changed.

Property, Medical Equipment, and Business Income

A medical office may have diagnostic devices, refrigerated medication, tenant improvements, and specialized furnishings that exceed the assumptions built into a basic business owner’s policy. Equipment breakdown coverage can address certain mechanical or electrical failures, while spoilage coverage may be needed for temperature-sensitive inventory.

Business income and extra-expense coverage help when a covered property loss closes the office or forces the practice into temporary space. Limits should reflect both the time required to repair the premises and the delay involved in replacing or recalibrating specialized equipment.

Why California Medical Practices Face Distinct Insurance Risks

The Corporate Practice of Medicine Doctrine Splits Who Needs Coverage

California’s corporate practice of medicine doctrine, rooted in Business and Professions Code sections 2052, 2400, and 2264 and the 1938 Pacific Health Corp. decision, prohibits a non-physician-owned entity from practicing medicine or controlling clinical decisions. Most practices that bring in outside management or investment end up structured as a professional corporation, at least 51 percent physician-owned, paired with a separately owned management services organization that handles real estate, billing, technology, and other non-clinical functions, according to a summary of the MSO/PC structure from Bay Legal.

 That split matters for insurance because the PC and the MSO are separate legal entities with separate insurable interests: the PC typically carries the malpractice policy tied to clinical care, while general liability, property, cyber, and employment practices coverage often need to reach both entities. A policy written for only one side of that structure can leave the other exposed.

Employment Practices and Workers’ Compensation

A practice’s staff creates risks that malpractice insurance does not address. Employment practices liability can respond to claims involving harassment, discrimination, retaliation, or wrongful termination, while workers’ compensation covers job-related injuries and occupational illness for employees.

California’s classification rules also matter when a practice uses per-diem staff or treats providers as independent contractors. A contract label alone does not settle employment status, so payroll, supervision, scheduling, and control should be reviewed with the broker and legal adviser before coverage is placed.

How Much Does Medical Office Insurance Cost in California?

Specialty is the biggest driver: a practice performing in-office procedures carries a different risk profile than one doing primary care consultations only. Number of providers, whether the practice stores patient records on-site or through a third-party vendor, claims history, and whether the business operates under a PC/MSO split (which can mean pricing coverage across two entities instead of one) all move the price from there.

How Old Harbor Insurance Helps

A medical practice’s insurance needs rarely stay static: adding a provider, opening a second location, or bringing on outside management each change what needs to be covered and how. Old Harbor Insurance works with more than 80 A-rated carriers to match coverage to where a practice stands today, rather than where it stood when the policy was first written. Reviewing how a business property claim gets handled is worth doing before a cyber or property claim tests it for the first time.

Get Your Practice Properly Covered

A malpractice policy alone doesn’t answer what happens when a patient’s data is breached, a visitor is hurt in the parking lot, or a management dispute leaves a gap between the PC and the MSO. Contact Old Harbor Insurance to review coverage across a practice’s full structure, or request a quote to compare general liability, cyber, and property options across multiple carriers.

Frequently Asked Questions

Does general liability insurance cover a patient who slips and falls in the waiting room?

Yes, a patient or visitor injury unrelated to clinical treatment is typically what general liability is built to cover, separate from a claim about diagnosis or treatment, which falls to medical malpractice instead.

Is medical malpractice coverage included in a standard business owner’s policy?

No. A standard BOP bundles general liability and property coverage together but doesn’t include medical malpractice, which has to be purchased as its own policy. A practice assuming its BOP covers a clinical claim will find out otherwise at the worst possible time.

What is tail coverage, and does a departing physician need it?

Tail coverage extends a claims-made malpractice policy to cover incidents that happened while the policy was active but get reported after it ends, which matters because a claims-made policy only responds to claims filed while it’s in force. A physician leaving a practice or retiring typically needs tail coverage to stay protected against a claim filed after their original policy lapses.

Does workers’ compensation cover a physician who works at the practice as an independent contractor?

Generally not, if the physician is properly classified as an independent contractor rather than an employee. Misclassifying a provider who functions like an employee, however, is its own liability, since California applies a strict test for contractor status and a misclassification can leave a practice exposed for an injury workers’ comp should have covered.

If a practice uses the MSO/PC structure, which entity carries the general liability policy?

It depends on how the structure is set up, but both entities typically need to be addressed on the policy in some form, either as a named insured or an additional insured, since the PC delivers patient care while the MSO usually owns or manages the physical office. Leaving one entity off the policy entirely is a common gap in practices that adopted the MSO structure without revisiting their insurance.

Does malpractice coverage extend to telehealth visits with patients in another state?

Not automatically. A malpractice policy needs to specifically extend to telehealth, and coverage can depend on whether the provider is licensed in the state where the patient is physically located at the time of the visit. A practice offering telehealth across state lines should confirm both licensing and coverage before treating a patient outside California.

Does a medical office need business interruption coverage if it can still see patients remotely?

A medical office may still need business interruption coverage even when some care can continue through telehealth. The policy should account for lost in-person revenue, extra expenses for temporary space or technology, and any waiting period before benefits begin; ordinary malpractice coverage does not replace that income.