What Is Medical Malpractice Insurance and How It Works

Medical malpractice insurance is professional liability coverage that pays a healthcare provider’s legal defense costs, settlements, and court judgments when a patient alleges negligence or an error in care. A single claim can cost tens of thousands of dollars to defend even when it’s ultimately dismissed, and judgments routinely reach six or seven figures. The policy stands between one bad outcome and a career’s worth of savings. How well it actually stands there depends on the type of policy you carry, the limits you buy, what the policy excludes, and how settlements get reported once they’re paid.

Who Actually Needs Coverage

Exposure isn’t limited to surgeons and primary care physicians. Nurses, nurse practitioners, physician assistants, anesthesiologists, dentists, physical therapists, and psychologists all face malpractice claims tied to their scope of practice. Anyone involved in patient care decisions can be named in a lawsuit.

No federal law requires physicians to carry the coverage. Only about seven states explicitly mandate it: Colorado, Connecticut, Kansas, Massachusetts, New Jersey, Rhode Island, and Wisconsin. Roughly seven more require minimum coverage for physicians who want to participate in state programs that cap damages or provide supplemental protection. Elsewhere, carrying insurance is technically optional but practically essential. Hospitals almost universally require proof of coverage before granting admitting or surgical privileges, and many group practices and health systems require it as a condition of employment.

If you’re employed by a hospital or large health system, the employer’s policy likely covers you for work performed within the scope of that employment. That isn’t the same as being fully protected. Employer policies typically won’t cover moonlighting, volunteer clinics, or telemedicine across state lines. If you leave that employer, coverage for incidents that happened on their watch can disappear unless tail coverage is purchased. Many employed physicians carry a separate individual policy for exactly these reasons.

Occurrence-Based vs. Claims-Made Policies

This is the single most important distinction in malpractice insurance, and getting it wrong can leave you exposed for years of past practice. The two policy types respond to claims on completely different timelines.

Occurrence Policies

An occurrence policy covers any incident that happens during the policy period, no matter when the claim is actually filed. If you had an occurrence policy in force in 2024 and a patient files a lawsuit in 2028 over care you provided that year, the 2024 policy responds. Each policy year creates a permanent block of coverage with its own limits, and you don’t need to keep the policy active to preserve that protection. The tradeoff is cost: annual premiums are higher because the insurer is taking on open-ended liability for every year you’re covered.

Claims-Made Policies

A claims-made policy only responds if two conditions are met: the incident happened after a specific retroactive date on the policy, and the claim is actually reported while the policy is still in force. Fail either condition and you’re on your own. The retroactive date is usually the day your first claims-made policy took effect, and it carries forward as long as you keep renewing with the same insurer.

Claims-made premiums start significantly lower than occurrence premiums because in year one the insurer is only exposed to incidents from that single year. Premiums increase annually as the window of prior exposure grows, typically reaching a stable “mature” rate after five to seven years. The catch is that when a claims-made policy ends for any reason, protection evaporates unless you buy tail coverage or arrange prior acts coverage through a new carrier.

Tail Coverage and Prior Acts Coverage

When you leave a practice, retire, or switch insurers while on a claims-made policy, you face a gap: incidents from your covered years can still generate lawsuits, but your policy is no longer active to receive those claims. Two options close that gap.

Tail coverage, formally called an extended reporting period, extends the reporting window on your old policy indefinitely. You buy it from your departing insurer, usually within 30 to 60 days of cancellation. It’s a one-time purchase, typically priced at 1.5 to 2 times your final annual premium. For a surgeon paying $50,000 a year, that’s $75,000 to $100,000 in a single payment.

Prior acts coverage, sometimes called nose coverage, works from the other direction. Your new insurer adopts your old retroactive date, absorbing claims for incidents that happened before you switched. The new carrier prices the premium based on how many years of retroactive exposure it’s taking on. Bringing five or more years typically puts you at the mature rate immediately. Prior acts coverage doesn’t add cost beyond what the new carrier would already charge for that level of exposure, but it defers rather than resolves the tail question. If you switch carriers again later, you’ll face the same choice.

Tail coverage becomes mandatory rather than optional in a few situations: switching from a claims-made policy to an occurrence policy, an employment contract that requires it, or a new carrier that won’t accept your prior risk profile due to a specialty change or relocation to a higher-risk area.

What a Policy Pays For

Standard malpractice coverage responds to allegations of professional negligence that harm a patient. The most common claims involve misdiagnosis or delayed diagnosis, surgical errors, medication mistakes, birth injuries, and failure to obtain informed consent. On a covered claim, the policy pays for legal defense, expert witnesses, court costs, and any settlement or judgment up to the policy limits.

Limits are expressed as two numbers. The first is the per-claim limit; the second is the aggregate limit for all claims in a policy year. The most common configuration for individual practitioners is $1 million per claim with a $3 million annual aggregate. Higher-risk specialties like neurosurgery and obstetrics frequently need higher limits, and some hospitals require them as a condition of privileges.

How defense costs interact with those limits matters more than most providers realize. Under a “defense outside the limits” arrangement, the insurer pays defense costs on top of the policy limits, so a prolonged legal fight doesn’t eat into the money available for a settlement. Under “defense inside the limits,” every dollar spent on lawyers reduces what’s left to pay a judgment. The first arrangement is far more protective. Not every policy offers it, so check your declarations page.

What’s Typically Excluded

Malpractice policies don’t cover everything that can go wrong in a healthcare setting. Standard exclusions include intentional or criminal acts, punitive damages, and sexual misconduct. If a court or regulatory body determines that sexual misconduct occurred, most policies exclude coverage entirely. Some policies provide a limited sublimit for defense costs while the allegations are still unproven, but that sublimit sits within the aggregate policy limit rather than adding to it.

Cyber liability is another significant gap. Standard malpractice policies generally exclude claims arising from data breaches or unauthorized disclosure of patient records. With electronic health records nearly universal and HIPAA penalties substantial, a separate cyber liability policy has become common among practices that store patient data electronically.

Coverage for specialized or experimental procedures may also be excluded by default, though some insurers allow you to add it back for an additional premium. If you perform procedures outside the standard scope for your specialty, confirm in writing that your policy covers them before a claim forces the question.

State licensing board investigations sit in a similar gray zone. Many standard policies provide limited or no coverage for defending disciplinary hearings and administrative proceedings, even though a lawsuit and a board investigation often run in parallel. Some carriers offer a separate endorsement for regulatory defense with its own sublimit. Ask directly rather than assuming.

How a Claim Actually Unfolds

When a claim arrives, you notify your insurer immediately, hand over the relevant medical records, and cooperate with the investigation. The insurer assigns a defense attorney who specializes in medical liability. That attorney reviews the records, consults experts, and builds a strategy. If the claim lacks merit, the defense may seek early dismissal. If the evidence is murkier, the insurer may push for settlement to limit exposure.

Whether you have a say in that settlement depends on your policy’s consent-to-settle clause. Some policies require your approval before the insurer agrees to any settlement amount. Others give the insurer full discretion. Many fall in the middle with what the industry calls a “hammer clause”: the insurer recommends a settlement figure, and if you refuse it, the insurer’s obligation is capped at that recommended amount. Any costs above the cap, whether from continued defense expenses or a larger eventual judgment, fall on you.

Settling has consequences beyond the immediate case. Every malpractice payment made on your behalf, whether from a settlement or a judgment, gets reported to the National Practitioner Data Bank. The reporting requirement applies to any entity that makes a malpractice payment for a healthcare practitioner, including insurance companies and self-insured institutions.1Office of the Law Revision Counsel. 42 USC 11131 – Requiring Reports on Medical Malpractice Payments Reports must be submitted within 30 days of payment.2HRSA: NPDB Guidebook. Reporting Medical Malpractice Payments

Hospitals are required by federal law to query the NPDB whenever a physician or other practitioner applies for staff appointment or clinical privileges, and health plans query it when adding providers to networks.3Health Resources and Services Administration. NPDB Guidebook A report doesn’t automatically disqualify anyone, but it triggers closer scrutiny, and multiple reports can make hospital privileges and insurance panel participation genuinely difficult to secure. An insurer that fails to report a payment faces a civil money penalty of up to $28,619 per unreported payment as of January 2026.4NPDB. Civil Money Penalties Insurers have every incentive to report promptly, and there’s no way to keep a settlement off the record.

What Premiums Cost

Premiums vary enormously based on a handful of factors that insurers weigh heavily. Specialty is the biggest driver. Most physicians pay somewhere between $7,500 and $20,000 per year, but high-risk specialties blow past those averages. OB/GYNs commonly pay $60,000 to over $100,000 annually, and neurosurgeons face similar territory. Family medicine and internal medicine practitioners, who get sued far less often, sit at the low end.

Geography matters almost as much as specialty. Providers in states with higher litigation rates, larger jury awards, or fewer tort reform protections pay substantially more than those in states with damage caps or pretrial screening requirements. Personal claims history factors in as well: a clean record keeps premiums stable, while even one prior claim can push rates up meaningfully. Policy limits, deductible amount, and the choice between occurrence and claims-made further shape the final number.

Going Without Coverage

Some physicians deliberately practice without malpractice insurance, a choice the industry calls “going bare.” The logic is that without a visible policy, plaintiffs’ attorneys will see less financial incentive to sue. That logic has serious holes. Attorneys can still pursue personal assets, including your home, savings, and practice revenue. Defending even a frivolous claim that gets dismissed can cost $22,000 to $100,000 in legal fees, and a judgment can reach into the millions.

In the states that mandate coverage, going without it can result in fines, license suspension, or revocation. Even where no mandate exists, uninsured providers find their career options narrow: most hospitals won’t grant privileges to an uninsured provider, and many health plans won’t credential one. Some states impose specific requirements on uninsured physicians. Florida, for example, requires posting a bond, maintaining an escrow account, and displaying a notice in the office informing patients that the provider carries no malpractice insurance.

An uninsured provider facing a claim has no insurer-assigned defense attorney, no claims management support, and no negotiating leverage with the plaintiff. Defense counsel must be hired and paid out of pocket from day one. For most practitioners, the annual premium is a far cheaper form of protection than a single uninsured claim.