What Medical Malpractice Insurance Does NOT Cover: Understanding the Gaps in Your Protection

Medical malpractice insurance is one of the most important protections a healthcare professional or medical practice can carry. It can help protect physicians, surgeons, nurse practitioners, physician assistants, and other healthcare providers when they are accused of causing harm through a professional error, omission, or negligent act.

But there is an important fact that is sometimes overlooked:

Medical malpractice insurance does not cover everything that can go wrong in a healthcare practice.

Many providers assume that because they have a strong medical professional liability policy, they are protected against nearly every lawsuit or financial loss related to their practice. Unfortunately, that is not always the case.

Understanding what medical malpractice insurance does not cover can help healthcare professionals identify potential gaps and build a more complete risk management and insurance strategy.

What Does Medical Malpractice Insurance Typically Cover?

Before discussing the exclusions, it helps to understand the basic purpose of medical malpractice insurance.

Generally, a medical professional liability policy is designed to respond to allegations involving professional negligence. Depending on the policy and circumstances, coverage may help with:

  • Legal defense costs

  • Settlements

  • Judgments

  • Claims alleging errors or omissions in professional services

  • Allegations that a patient was injured because a provider failed to meet the applicable standard of care

For example, a physician may face a malpractice claim alleging a delayed diagnosis, surgical error, medication mistake, or failure to properly monitor a patient.

However, the exact scope of coverage depends on the policy language, exclusions, endorsements, limits, and the professional services specifically covered.

1. Intentional or Criminal Acts

One of the most common exclusions in medical malpractice insurance involves intentional wrongdoing.

Medical malpractice policies are generally designed to address allegations of negligence—not deliberate misconduct.

Coverage may be excluded for acts involving:

  • Intentional injury

  • Criminal conduct

  • Fraud

  • Dishonesty

  • Sexual misconduct or abuse, depending on policy language

  • Deliberate violations of the law

For example, a provider who intentionally harms a patient would generally not expect a medical malpractice policy to provide coverage for that intentional conduct.

There can also be important differences between a policy paying for a legal defense while allegations are unresolved and whether the insurer ultimately has an obligation to indemnify the insured. These details can vary significantly by carrier and policy.

2. Employment-Related Claims

Medical practices are businesses with employees, contractors, managers, and workplace relationships. As a result, they can face lawsuits that have nothing to do with patient care.

A medical malpractice policy may not cover employment-related allegations such as:

  • Wrongful termination

  • Discrimination

  • Harassment

  • Retaliation

  • Failure to promote

  • Other employment practices claims

For example, if a former employee alleges that a medical practice terminated them because of discrimination, that is generally not a traditional medical malpractice claim.

This is why many healthcare practices consider Employment Practices Liability Insurance (EPLI) as a separate part of their insurance program.

3. General Liability Claims

Not every injury that occurs at a medical practice is the result of professional negligence.

Imagine a patient walking through a medical office and slipping on a wet floor. If the patient is injured, the claim may involve premises liability rather than medical malpractice.

General liability insurance may help address claims involving:

  • Slip-and-fall injuries

  • Property damage to others

  • Certain bodily injury claims unrelated to professional services

  • Personal and advertising injury, depending on the policy

A medical malpractice policy is not necessarily designed to replace general liability coverage.

For healthcare practices, understanding the difference between professional liability and general liability is essential.

4. Cyberattacks and Data Breaches

Healthcare organizations are attractive targets for cybercriminals because they often store valuable information, including protected health information, financial information, and other sensitive patient data.

A medical malpractice policy may provide limited coverage for certain privacy-related allegations, but it should not automatically be assumed that the policy provides comprehensive protection against a cyber incident.

A significant cyber event could involve:

  • Ransomware

  • Hacking

  • Data breaches

  • Stolen patient information

  • Business interruption

  • Notification expenses

  • Credit monitoring

  • Regulatory investigations

  • Extortion demands

Healthcare practices should carefully review whether they have dedicated cyber liability insurance and understand exactly what events are covered.

5. Property Damage to Your Own Practice

Medical malpractice insurance is generally not designed to replace commercial property insurance.

If a fire, theft, water loss, or other covered property event damages your office, medical equipment, furniture, or other business property, you may need separate commercial property coverage.

Depending on your practice, a broader business insurance program may include coverage for:

  • Office contents

  • Medical equipment

  • Computers

  • Furniture

  • Improvements and betterments

  • Business personal property

A provider could have excellent medical malpractice limits and still face a major uninsured loss if the practice's physical property is not properly insured.

6. Workers' Compensation Claims

Healthcare professionals and staff can be injured on the job.

Examples may include:

  • Needlestick injuries

  • Back injuries from lifting or assisting patients

  • Slip-and-fall accidents

  • Repetitive stress injuries

  • Workplace violence injuries

Medical malpractice insurance generally does not serve as workers' compensation coverage for employee injuries.

Depending on state law and the structure of the practice, employers may be required to carry workers' compensation insurance.

7. Commercial Auto Accidents

If your practice owns vehicles or employees drive vehicles for business purposes, an auto accident may create another type of liability exposure.

Medical malpractice insurance generally is not intended to cover automobile accidents.

Depending on the situation, a healthcare practice may need:

  • Commercial auto insurance

  • Hired and non-owned auto coverage

  • Additional liability protection

This can be particularly important for practices that provide home visits, mobile healthcare services, or transportation-related services.

8. Business and Management Decisions

Medical professionals often serve in multiple roles. In addition to treating patients, they may own a practice, sit on a board, manage an organization, or make important financial and operational decisions.

A medical malpractice policy is primarily focused on professional healthcare services. It may not cover claims arising from management decisions or allegations against directors and officers.

Examples could include claims involving:

  • Mismanagement

  • Breach of fiduciary duty

  • Improper business decisions

  • Misuse of organizational funds

  • Allegations against board members or executives

Depending on the organization, Directors and Officers (D&O) liability insurance may help address some of these risks.

9. Regulatory Fines and Certain Penalties

Healthcare providers operate in a highly regulated environment. A regulatory investigation, fine, or penalty can create significant financial consequences.

However, medical malpractice insurance may not cover every regulatory issue or financial penalty.

Potential exclusions or limitations may involve:

  • Fines

  • Penalties

  • Certain sanctions

  • Intentional violations of law

  • Fraudulent billing

  • Government enforcement actions

Some policies may offer defense coverage or endorsements for specific regulatory proceedings, while others may provide little or no protection.

The important lesson is simple: do not assume that your malpractice policy covers every investigation simply because it involves your medical practice.

10. Services Outside Your Covered Scope of Practice

One of the most important areas to review is the definition of covered professional services.

A provider may expand their practice by adding:

  • New procedures

  • Cosmetic or aesthetic services

  • Telemedicine

  • Home visits

  • Consulting services

  • Supervisory responsibilities

  • New specialties or subspecialties

If a service is not properly disclosed or falls outside the professional services covered by the policy, a coverage dispute could arise.

Before adding a new service, healthcare providers should review their malpractice coverage and confirm whether the new activity is included.

Do not wait until a claim occurs to discover that a new procedure or service created a coverage gap.

11. Prior or Known Incidents That Were Not Properly Reported

Claims-made malpractice policies can have specific reporting requirements.

Depending on the policy, an insurer may require the insured to report:

  • Claims

  • Potential claims

  • Incidents that could reasonably lead to a claim

If a provider becomes aware of a serious incident but fails to report it according to the policy requirements, coverage could potentially be affected.

Likewise, if a provider changes insurance carriers, gaps involving prior acts coverage, retroactive dates, or tail coverage may leave certain claims uninsured.

For providers with claims-made coverage, understanding the reporting provisions is just as important as understanding the policy limits.

12. Claims Involving Services Not Disclosed to the Insurer

Medical practices change over time.

A physician may begin performing new procedures. A practice may hire additional providers. A provider may start working in another state or offering telehealth services to patients in multiple jurisdictions.

If these changes are not disclosed when required, the policy may not respond as expected.

Important changes to discuss with your insurance professional may include:

  • Adding new providers

  • Adding new locations

  • Offering new procedures

  • Practicing across state lines

  • Expanding telehealth services

  • Supervising additional practitioners

  • Changing the type of patients treated

The goal is not simply to have medical malpractice insurance. The goal is to make sure your coverage reflects what you actually do.

Medical Malpractice Insurance Is Only One Piece of the Puzzle

For many healthcare providers, medical malpractice insurance is the foundation of their insurance program—but it is not the entire program.

Depending on the practice, other coverages may include:

  • General liability insurance

  • Commercial property insurance

  • Cyber liability insurance

  • Employment Practices Liability Insurance

  • Workers' compensation insurance

  • Commercial auto insurance

  • Directors and Officers liability insurance

  • Crime insurance

  • Business interruption coverage

  • Excess or umbrella liability coverage

Every healthcare practice is different. A solo physician practice may have very different exposures than a multi-provider medical group, surgery center, wellness clinic, or management services organization.

How to Identify Gaps in Your Medical Malpractice Coverage

A good starting point is to review your policy and ask a few important questions:

  • What professional services are specifically covered?

  • What services or procedures are excluded?

  • Are defense costs included within or outside the policy limits?

  • Does the policy cover telehealth and multi-state practice?

  • Are supervisory duties covered?

  • What are the policy's major exclusions?

  • Is the coverage trigger incident-sensitive or written demand?

  • What are the conditions for settlement?  No consent, limited consent (carrier settles at a certain amount and to continue fighting the claim, the insured will have to pay a percentage out of pocket), or full consent (the carrier CANNOT settle without the insured's written consent)

  • Are regulatory or licensing board proceedings covered?

  • Does the policy provide coverage for privacy-related claims?

  • What happens if you change carriers or retire?

  • Do you need tail coverage or prior acts coverage?

It can also be helpful to review your entire insurance program rather than looking at each policy separately.

Final Thoughts: The Biggest Coverage Risk May Be Assuming You Are Covered

Medical malpractice insurance can provide critical protection when a healthcare provider faces allegations of professional negligence. But it has limitations.

Claims involving employment practices, cyber incidents, property damage, workers' injuries, automobile accidents, business management decisions, intentional acts, and other exposures may require separate coverage.

The most important step is to understand what your policy actually covers—and, just as importantly, what it does not cover.

A regular insurance and risk management review can help healthcare providers identify potential gaps before a claim, lawsuit, cyberattack, or other unexpected event exposes them.

Disclaimer: This article is for general informational purposes only and is not legal or insurance advice. Coverage varies based on the specific policy language, endorsements, exclusions, jurisdiction, facts of the claim, and applicable law. Healthcare providers should review their individual coverage with qualified legal, insurance, and risk management professionals.