The other policies: general liability, property, cyber

Malpractice insurance covers a narrower slice than 'insurance' suggests

Malpractice insurance responds to one specific exposure: a claim that the clinical treatment itself caused harm. It says nothing about a client who slips on a wet floor in the waiting room, a laptop stolen from the office, a burst pipe that destroys the file cabinets, or a breach of client records — each of those sits under a different policy, bought separately, and a practice carrying only malpractice coverage is uninsured against all of them.

Forming an LLC or PLLC 1Ref 1U.S. Small Business Administration (2026).Choose a business structure.That entity formation (LLC/PLLC) addresses business and liability structure and is distinct from — and not a substitute for — insurance coverage of a third-party loss. narrows the owner's personal exposure to some business-side claims, but insurance, not entity structure, is what actually pays a third party for a covered loss — the two work together rather than substituting for each other.

A useful way to sort the remaining policies is by who gets hurt: malpractice answers a client's claim about the treatment itself, general liability answers anyone's claim about a physical incident on the premises, property insurance answers the practice's own loss of its equipment and furnishings, and cyber liability answers the cost of responding to a breach of the records the practice holds on everyone it has ever seen.

General liability: the slip-and-fall and property-damage policy

General liability insurance covers third-party bodily injury or property damage that happens on the practice's premises or because of its operations — a client who falls in the waiting room, a vendor's equipment damaged during a delivery, a claim that the practice's negligence, not its clinical care, caused a loss. It is the policy most landlords require proof of before handing over keys, independent of whatever the lease itself says about liability.

A landlord's insurance requirement is typically a specific minimum limit named in the lease, and confirming that number before signing avoids discovering it after the space is already under contract.

A home-based practice is not automatically exempt from needing this coverage — a client visiting a home office is still a third party on the premises, and a homeowner's or renter's policy commonly excludes business-related visitors and business equipment from its ordinary coverage, which is the gap a general liability policy is bought to close.

Property insurance and the Business Owner's Policy bundle

Property insurance covers the physical contents of the office — furniture, computers, medical or testing equipment, leasehold improvements — against fire, theft, water damage, and similar perils, separate from whatever coverage a landlord carries on the building itself. Many carriers bundle general liability and property coverage into a single Business Owner's Policy, typically cheaper than buying the two separately and the standard starting point most small offices reach for first.

Equipment used for CLIA-certified point-of-care testing 2Ref 2Centers for Medicare & Medicaid Services (2026).Clinical Laboratory Improvement Amendments (CLIA).That an office performing CLIA-waived point-of-care testing needs a federal CLIA certificate, distinct from the property-insurance question of covering the testing equipment itself. is itself a property-insurance question distinct from the CLIA certificate that authorizes the testing — the certificate permits the test; the policy replaces the analyzer if it's stolen or damaged.

A property policy's coverage is usually written as either replacement cost, paying to replace the item new, or actual cash value, paying its depreciated worth — the difference matters most for a laptop or a piece of testing equipment several years old, where actual-cash-value coverage can leave a meaningful gap between the payout and the cost of a replacement.

Cyber liability: the breach-response policy a clinical practice specifically needs

A practice holding clinical records is a more attractive and more consequential breach target than the average small business, and a cyber-liability policy typically covers breach notification costs, credit-monitoring for affected clients, forensic investigation, and legal defense — expenses a general liability policy does not reach. Many BOPs offer a cyber endorsement as an add-on rather than a full standalone policy, which is often enough coverage for a solo practice's actual exposure.

The line to check before assuming the endorsement is adequate is the sublimit — a BOP's cyber add-on often caps payout well below what a standalone policy would, a detail worth reading rather than assuming from the word 'cyber' on the summary page.

Breach-notification costs alone can be substantial even for a small client list, since most notification laws require individual written notice to every affected person rather than a single public statement, and some also require offering credit-monitoring services — costs a cyber policy is specifically built to absorb rather than a general liability or property policy responding at all.

Workers' compensation and EPLI: the trigger is hiring, not size

Workers' compensation becomes relevant the moment a practice has its first employee — most states require it starting at one employee, well before a practice would think of itself as having staff. A solo clinician working entirely alone, with no employees and no subcontracted clinical staff, typically doesn't need it yet, but the requirement activates immediately on the first hire, not gradually.

Employment practices liability insurance covers claims like wrongful termination or harassment brought by an employee — a real exposure the moment there's a first hire, even a part-time front-desk role, and one a malpractice or general liability policy does not cover.

An independent contractor arrangement, common for a covering clinician or a biller who works with several practices, does not automatically avoid the workers'-compensation question — misclassifying an employee as a contractor is a separate and sometimes costly problem in its own right, distinct from whether the underlying insurance policy itself is required.

Budgeting these into the practice plan

Itemizing insurance premiums — malpractice, general liability or a BOP, and cyber — as a distinct startup-cost line item 3Ref 3U.S. Small Business Administration (2026).Calculate your startup costs.That SBA's startup-cost method itemizes insurance premiums as a distinct startup-budget line item. avoids the common first-year miscalculation of budgeting for malpractice alone and treating everything else as an afterthought. A written practice plan that lists each policy and its renewal date 4Ref 4U.S. Small Business Administration (2026).Write your business plan.That an SBA-style business plan lists required insurance policies and their renewal dates as part of the practice-plan skeleton. is the same document a landlord or a lender may ask to see.

An EIN 5Ref 5Internal Revenue Service (2026).Apply for an Employer Identification Number (EIN) online.That an EIN is free, immediate, and online — the identifier used on insurance applications in place of the owner's SSN. is typically what these applications ask for instead of the owner's Social Security number, the same identifier already in use for local licenses and payer enrollment — having it ready before requesting quotes avoids a second round of paperwork on every application.