At a glance
Understand the risk.
Ask the right questions.
Healthcare Institutions Insurance starts with a clear picture of the work you perform, the responsibilities you accept and the events that could interrupt your business. This guide brings together common risks, insurance categories, practical documents and questions to discuss with your broker. Your business may need a different combination of covers or extensions from another business in the same industry.
Use the sections below to prepare for an insurance conversation in Perth, Sydney, Melbourne, Brisbane, Canberra or elsewhere in Australia. These examples are general information, not a recommendation that a particular policy is suitable for you. Your activities, locations, contracts and the applicable policy wording need to be considered together.
General information only. This does not take into account your objectives, financial situation or needs. Before acting, consider whether the information is appropriate for you. Cover is subject to insurer acceptance and the policy terms, conditions, limits and exclusions. Read the Financial Services Guide and the relevant PDS (where applicable) and/or policy wording before deciding.
01 / Understand your exposure
Common risks to consider.
- A system, staffing or supervision issue contributes to a patient-safety allegation across multiple practitioners.
- A major privacy, cyber or records incident affects a large number of patients.
- Property damage or equipment failure disrupts critical services and requires temporary relocation.
- An incident arising from the day-to-day activities of healthcare institutions leads to an allegation of injury, damage or financial loss.
- A contract, approval or record does not clearly document the responsibilities of healthcare institutions after a problem occurs.
- Allegations of professional error, delayed referral, treatment injury or failure to obtain informed consent.
02 / Connect risks with cover
Insurance commonly considered.
No single package suits every business. The descriptions below identify possible cover categories; each is subject to its own wording and underwriting.
may respond to covered allegations that professional services, advice, designs or omissions caused financial loss, subject to the insured services, retroactive date and claims-made notification requirements.
may respond to certain third-party injury or property-damage allegations arising from business activities, subject to the insured activities and policy wording.
may assist with specified cyber incidents, privacy events, response costs and business interruption, depending on the event, security controls, sub-limits and exclusions.
may cover specified buildings, contents, stock and equipment following insured events, subject to declared values, exclusions and settlement terms.
may assist with insured loss of gross profit or revenue and certain additional costs when a covered event triggers the policy, subject to the indemnity period and calculation basis.
addresses statutory workers compensation obligations where applicable. Requirements and worker definitions vary between Australian jurisdictions.
Management liability insurance
may respond to certain directors and officers, employment-practices, statutory-liability or crime exposures where included, subject to policy terms and legal insurability.
A policy name does not establish that an activity or incident is insured. Review the insured business description, trigger, conditions, limits, excess and exclusions with your broker.
03 / A closer look at your business
Details worth discussing.
Describe the institution's services and operating relationships
A healthcare institution may provide consultations, procedures, diagnostics and other services through employed and visiting practitioners. Explain which services the institution delivers directly and which are provided by separate businesses. Identify the entities operating facilities, employing staff and owning major assets. A hospital, diagnostic centre and day procedure facility can have different patient pathways and dependencies. The insurer needs the actual service model rather than only a broad healthcare label. Include outsourced clinical and support functions, because the institution may still face allegations concerning coordination, supervision or the way those services are integrated into patient care.
Map the systems and equipment that allow services to continue. Clinical records, imaging, sterilisation, power, medical gases and other specialist resources may be important depending on the facility. Describe maintenance, monitoring and replacement arrangements in terms appropriate to the operation. A failure can affect several departments or practitioners at once, rather than a single appointment. Explain the role of outside suppliers and the practical limits of alternative facilities. Professional liability, property, cyber and interruption arrangements can address different aspects of this exposure, and their triggers and exclusions need to be considered separately rather than inferred from the institution’s overall insurance program.
Connect service agreements with clinical governance records
Practitioner, facility-use and service agreements can allocate responsibilities for records, equipment, staffing and patient communications. Keep those arrangements available for review alongside the description of insured services. Clarify which entities and people are included under the institution’s cover and where separate professional arrangements may be relevant. A practitioner’s certificate does not establish that every allegation involving the institution is insured. Ask how the proposed wording treats systemic issues, supervision and claims involving several parties. The allocation of responsibility in a contract should be considered with the actual work and the policy provisions, including any assumed liabilities.
Governance and credentialing records can help explain how services were authorised and organised. Retain appropriate incident, complaint and review information through the institution’s clinical and privacy processes. For major equipment and buildings, keep valuations and practical reinstatement assumptions available. Restoration of a damaged facility may involve commissioning, staffing and service approval steps beyond physical repairs. Discuss those recovery stages when considering interruption periods and additional costs. Relocation, patient transfer and temporary services should not be assumed to be covered simply because they are necessary operationally; the selected wording must be checked for the relevant event and expense.
Coordinate records when an issue crosses departments
A serious incident may generate information from clinical teams, facilities staff, information technology and external providers. Establish who coordinates a factual timeline and preserves relevant records without unnecessary circulation of patient information. Keep observations distinct from preliminary theories about cause. The institution’s reporting and review processes may have several purposes, and insurance notification should be checked alongside them. A complaint may develop over time or involve multiple practitioners, so the relevant correspondence and service history should remain retrievable. Avoid treating the absence of a formal legal demand as proof that no policy reporting question arises.
Before renewal, review new services, changes in practitioner arrangements and significant equipment or facility upgrades. Consider whether acquisitions or partnerships have changed the entities and responsibilities in the program. Test practical access to essential records during a system outage and identify the people authorised to coordinate external assistance. Keep unresolved allegations and material incidents available for the submission. The insurance review should connect patient services, governance and supporting infrastructure so the available options can be assessed against the institution’s real dependencies, while recognising that cover for any future event remains subject to its facts and the applicable policy terms.
04 / Put it in context
What an incident might look like.
Hypothetical examples only. These are not BAU client stories or predictions of a claim outcome.
A system, staffing or supervision issue contributes to a patient-safety allegation across multiple practitioners. The affected party seeks compensation, defence costs or rectification expenses. Whether any policy responds would depend on the allegations, insured activities, policy trigger, exclusions, excess and limit.
A major privacy, cyber or records incident affects a large number of patients. The event also interrupts normal trading or creates additional expense. Property, liability, professional, cyber or interruption cover may be relevant only where the facts satisfy the applicable wording.
A few minutes. A different perspective.
Put your thinking
into practice.
Three situations for healthcare institutions businesses. Choose a practical next step, then explore why the details matter.
A learning activity with hypothetical situations. It is not a risk assessment, personal advice or a prediction of insurance cover.
What would you do next?
Work through the facts, the records and the questions you would take to your broker. There is no time limit.
05 / Prepare for the conversation
Bring the details.
Make the discussion useful.
Documents and contracts
- Facility accreditation, clinical governance and credentialing documents.
- Major equipment, property and business-continuity records.
- Professional registrations, qualifications, accreditation records and scope-of-practice documents.
- Patient or participant service agreements, consent forms and clinical record procedures.
- Facility, referral, subcontractor, locum and funding agreements.
- Privacy, cyber-security, incident-reporting and complaints-handling policies.
Questions to ask before choosing cover
- Are all professions, treatment modalities, locations, telehealth and home-visit services declared?
- Does professional indemnity include the required retroactive date, run-off arrangements and notification obligations?
- How are contractors, locums, students, volunteers and visiting practitioners treated?
- Are privacy, cyber, loss of records and regulatory investigation costs included or sub-limited?
- Do funder, registration, accreditation or facility agreements require particular limits or policy features?
06 / Know the limitations
What may not be covered.
The following are examples only, not a complete exclusion list. Product terms vary, and the applicable PDS and/or policy wording must be checked.
- Services, procedures or practitioners outside the insured professional-services definition or required registration.
- Known incidents, complaints, adverse outcomes or circumstances not notified as required.
- Deliberate harm, abuse, criminal conduct or treatment provided while impaired.
- Certain communicable-disease, clinical-trial, cosmetic, invasive or high-risk procedures unless specifically accepted.
- Cyber, employment, property or bodily-injury claims where the relevant policy or extension has not been arranged.
07 / Questions, explained
Frequently asked questions.
What insurance do healthcare institutions commonly consider?
Depending on their activities, assets, staff and contracts, healthcare institutions may consider Professional indemnity insurance, Public and products liability insurance, Cyber insurance. Other policies or extensions may also be relevant. No single list is suitable for every business, and availability is subject to insurer appetite and underwriting.
Would insurance automatically respond if a system, staffing or supervision issue contributes to a patient-safety allegation across multiple practitioners?
Not automatically. A claim outcome depends on the actual facts, the policy period, insured activities, definitions, exclusions, conditions, excesses, sub-limits and notification requirements. The relevant wording should be reviewed before relying on cover.
What information is usually needed to obtain a quote for Healthcare Institutions Insurance?
Insurers commonly request turnover or revenue, payroll, staff and contractor numbers, locations, claims or complaints history, and the exact activities to be insured, plus professional registrations, procedures, locations, patient volumes, contractors and incident history. Complete and accurate disclosure helps the insurer assess the risk, but it does not guarantee that cover will be offered or that a future claim will be accepted.
08 / Keep exploring
Connect the wider picture.
Read about the primary insurance categories and clarify the terms used in policy discussions. A link does not mean a product is suitable for your business.
Useful insurance terms
Official guidance
Local understanding. National reach.
Across Australia.
Connected to your business.
Based in Osborne Park, Western Australia, and supporting businesses nationally. These are service areas, not separate BAU offices. State and territory requirements can differ.
WAWestern Australia+
Perth, Bunbury, Mandurah, Rockingham and Kalgoorlie.
NSWNew South Wales+
Sydney, Newcastle, Central Coast, Wollongong and Maitland.
VICVictoria+
Melbourne, Geelong, Ballarat, Bendigo and Shepparton.
QLDQueensland+
Brisbane, Gold Coast, Sunshine Coast, Townsville and Cairns.
SASouth Australia+
Adelaide, Mount Gambier, Whyalla, Gawler and Port Pirie.
TASTasmania+
Hobart, Launceston, Devonport, Burnie and Ulverstone.
ACTAustralian Capital Territory+
Canberra, Gungahlin, Tuggeranong, Belconnen and Woden Valley.
NTNorthern Territory+
Darwin, Palmerston, Alice Springs, Katherine and Nhulunbuy.
Let’s start with your business
A clearer conversation
about your insurance.
Tell us what you do, what has changed and what you need to understand.
Speak with BAU Risk
Request a callback.
Tell us about your business and the cover questions you would like to discuss.
Before sharing personal information, read our privacy information.