At a glance
Understand the risk.
Ask the right questions.
Healthcare Insurance starts with a clear picture of the work you perform, the responsibilities you accept and the events that could interrupt your business. This guide brings together common risks, insurance categories, practical documents and questions to discuss with your broker. Your business may need a different combination of covers or extensions from another business in the same industry.
Use the sections below to prepare for an insurance conversation in Perth, Sydney, Melbourne, Brisbane, Canberra or elsewhere in Australia. These examples are general information, not a recommendation that a particular policy is suitable for you. Your activities, locations, contracts and the applicable policy wording need to be considered together.
General information only. This does not take into account your objectives, financial situation or needs. Before acting, consider whether the information is appropriate for you. Cover is subject to insurer acceptance and the policy terms, conditions, limits and exclusions. Read the Financial Services Guide and the relevant PDS (where applicable) and/or policy wording before deciding.
01 / Understand your exposure
Common risks to consider.
- An incident arising from the day-to-day activities of healthcare businesses leads to an allegation of injury, damage or financial loss.
- A contract, approval or record does not clearly document the responsibilities of healthcare businesses after a problem occurs.
- Allegations of professional error, delayed referral, treatment injury or failure to obtain informed consent.
- Medication, dispensing, infection-control, clinical-record or patient-identification incidents.
- Privacy breaches involving health information, appointment systems, email or third-party platforms.
- Patient, visitor or contractor injury at the premises or during home and community services.
02 / Connect risks with cover
Insurance commonly considered.
No single package suits every business. The descriptions below identify possible cover categories; each is subject to its own wording and underwriting.
may respond to covered allegations that professional services, advice, designs or omissions caused financial loss, subject to the insured services, retroactive date and claims-made notification requirements.
may respond to certain third-party injury or property-damage allegations arising from business activities, subject to the insured activities and policy wording.
may assist with specified cyber incidents, privacy events, response costs and business interruption, depending on the event, security controls, sub-limits and exclusions.
may cover specified buildings, contents, stock and equipment following insured events, subject to declared values, exclusions and settlement terms.
may assist with insured loss of gross profit or revenue and certain additional costs when a covered event triggers the policy, subject to the indemnity period and calculation basis.
addresses statutory workers compensation obligations where applicable. Requirements and worker definitions vary between Australian jurisdictions.
Management liability insurance
may respond to certain directors and officers, employment-practices, statutory-liability or crime exposures where included, subject to policy terms and legal insurability.
A policy name does not establish that an activity or incident is insured. Review the insured business description, trigger, conditions, limits, excess and exclusions with your broker.
03 / A closer look at your business
Details worth discussing.
Map clinical and organisational responsibilities
Healthcare organisations should describe the services delivered and the way care is organised. Explain whether the business operates consulting rooms, a multidisciplinary clinic, a treatment facility or services delivered in patients’ homes. Identify which clinicians are employees and which work under separate contracting arrangements. Include diagnostic services, prescribing, procedures, telehealth and any non-clinical support offered where relevant. The broker needs to understand the entity responsible for the premises and systems as well as the practitioners responsible for care. These roles can overlap, but they should not be collapsed into a single assumption about who is insured.
Consider the shared systems on which practitioners rely. Appointment handling, referral pathways, clinical records, billing and equipment maintenance may be managed centrally even when clinicians operate independently. Describe who owns treatment equipment and who authorises changes to software or patient communications. Explain the handling of sensitive information and the process for managing access when staff leave. Ask how the proposed arrangements distinguish professional allegations, premises incidents, cyber events and damage to specialist equipment. The review should examine the wording applicable to each exposure, including the relationship between an organisation’s insurance and cover maintained by individual practitioners.
Bring service agreements and care processes into the review
Useful documents include practitioner agreements, facility leases, referral arrangements and service descriptions. Show how responsibility is allocated for record keeping, consent, supervision, equipment and complaints. If a health business provides services to another organisation, include the contract and any requested insurance conditions. A list of registered practitioners is helpful, but it does not by itself describe the services they deliver for your entity. Keep the declared scope current when new treatments or service locations are introduced. Obtain suitable professional or legal advice where an agreement’s expectations extend beyond the business’s established role or available insurance wording.
Maintain a practical inventory of medical and office equipment, distinguishing owned, leased and shared assets. Include service history, specialist installation requirements and the information needed to obtain a replacement. Keep clinical governance and privacy procedures accessible to the people using them, with a clear process for recording changes. For an insurance submission, describe actual arrangements rather than an ideal policy that has not been implemented. Consider how patient records can be accessed securely if a system or premises becomes unavailable. The relevant continuity details are those that explain how safe, authorised care and communication would be maintained.
Coordinate incident response without losing the clinical record
When an incident or complaint arises, prioritise patient welfare and the organisation’s established professional response. Preserve the original clinical and administrative records, including relevant correspondence and system information. Any later clarification should follow appropriate record-keeping practice and remain distinguishable from the original entry. Check the applicable insurer’s reporting and assistance arrangements early, particularly where both the organisation and an individual practitioner are involved. Allocate responsibility for gathering information and communicating with the patient so messages are coordinated. Avoid treating an insurance enquiry as a substitute for any separate clinical, professional or regulatory advice the situation requires.
Renewal should reflect changes in the service mix, practitioner workforce, locations and ownership. A new procedure, outsourced clinical function or expanded home-visiting service can change the information needed for underwriting. Review how an interruption to a critical system or treatment room would affect the organisation, including specialist equipment lead times and alternative facilities. Ask the broker about insured entities, professional service descriptions, policy periods and any relevant prior-work or notification provisions. These questions support a tailored review while recognising that insurance cannot be assumed to respond to every clinical complaint, operational disruption or expense incurred by a healthcare business.
04 / Put it in context
What an incident might look like.
Hypothetical examples only. These are not BAU client stories or predictions of a claim outcome.
An incident arising from the day-to-day activities of healthcare businesses leads to an allegation of injury, damage or financial loss. The affected party seeks compensation, defence costs or rectification expenses. Whether any policy responds would depend on the allegations, insured activities, policy trigger, exclusions, excess and limit.
A contract, approval or record does not clearly document the responsibilities of healthcare businesses after a problem occurs. The event also interrupts normal trading or creates additional expense. Property, liability, professional, cyber or interruption cover may be relevant only where the facts satisfy the applicable wording.
A few minutes. A different perspective.
Put your thinking
into practice.
Three situations for healthcare businesses. Choose a practical next step, then explore why the details matter.
A learning activity with hypothetical situations. It is not a risk assessment, personal advice or a prediction of insurance cover.
What would you do next?
Work through the facts, the records and the questions you would take to your broker. There is no time limit.
05 / Prepare for the conversation
Bring the details.
Make the discussion useful.
Documents and contracts
- Professional registrations, qualifications, accreditation records and scope-of-practice documents.
- Patient or participant service agreements, consent forms and clinical record procedures.
- Facility, referral, subcontractor, locum and funding agreements.
- Privacy, cyber-security, incident-reporting and complaints-handling policies.
Questions to ask before choosing cover
- Are all professions, treatment modalities, locations, telehealth and home-visit services declared?
- Does professional indemnity include the required retroactive date, run-off arrangements and notification obligations?
- How are contractors, locums, students, volunteers and visiting practitioners treated?
- Are privacy, cyber, loss of records and regulatory investigation costs included or sub-limited?
- Do funder, registration, accreditation or facility agreements require particular limits or policy features?
06 / Know the limitations
What may not be covered.
The following are examples only, not a complete exclusion list. Product terms vary, and the applicable PDS and/or policy wording must be checked.
- Services, procedures or practitioners outside the insured professional-services definition or required registration.
- Known incidents, complaints, adverse outcomes or circumstances not notified as required.
- Deliberate harm, abuse, criminal conduct or treatment provided while impaired.
- Certain communicable-disease, clinical-trial, cosmetic, invasive or high-risk procedures unless specifically accepted.
- Cyber, employment, property or bodily-injury claims where the relevant policy or extension has not been arranged.
07 / Questions, explained
Frequently asked questions.
What insurance do healthcare businesses commonly consider?
Depending on their activities, assets, staff and contracts, healthcare businesses may consider Professional indemnity insurance, Public and products liability insurance, Cyber insurance. Other policies or extensions may also be relevant. No single list is suitable for every business, and availability is subject to insurer appetite and underwriting.
Would insurance automatically respond if an incident arising from the day-to-day activities of healthcare businesses leads to an allegation of injury, damage or financial loss?
Not automatically. A claim outcome depends on the actual facts, the policy period, insured activities, definitions, exclusions, conditions, excesses, sub-limits and notification requirements. The relevant wording should be reviewed before relying on cover.
What information is usually needed to obtain a quote for Healthcare Insurance?
Insurers commonly request turnover or revenue, payroll, staff and contractor numbers, locations, claims or complaints history, and the exact activities to be insured, plus professional registrations, procedures, locations, patient volumes, contractors and incident history. Complete and accurate disclosure helps the insurer assess the risk, but it does not guarantee that cover will be offered or that a future claim will be accepted.
08 / Keep exploring
Connect the wider picture.
Read about the primary insurance categories and clarify the terms used in policy discussions. A link does not mean a product is suitable for your business.
Useful insurance terms
Official guidance
Local understanding. National reach.
Across Australia.
Connected to your business.
Based in Osborne Park, Western Australia, and supporting businesses nationally. These are service areas, not separate BAU offices. State and territory requirements can differ.
WAWestern Australia+
Perth, Bunbury, Mandurah, Rockingham and Kalgoorlie.
NSWNew South Wales+
Sydney, Newcastle, Central Coast, Wollongong and Maitland.
VICVictoria+
Melbourne, Geelong, Ballarat, Bendigo and Shepparton.
QLDQueensland+
Brisbane, Gold Coast, Sunshine Coast, Townsville and Cairns.
SASouth Australia+
Adelaide, Mount Gambier, Whyalla, Gawler and Port Pirie.
TASTasmania+
Hobart, Launceston, Devonport, Burnie and Ulverstone.
ACTAustralian Capital Territory+
Canberra, Gungahlin, Tuggeranong, Belconnen and Woden Valley.
NTNorthern Territory+
Darwin, Palmerston, Alice Springs, Katherine and Nhulunbuy.
Let’s start with your business
A clearer conversation
about your insurance.
Tell us what you do, what has changed and what you need to understand.
Speak with BAU Risk
Request a callback.
Tell us about your business and the cover questions you would like to discuss.
Before sharing personal information, read our privacy information.