Malpractice and business insurance for therapists and counselors.
Redoubt helps clinicians compare personal malpractice and private-practice business insurance when they begin side work, credential, lease space, offer telehealth, change states, create an entity, or replace coverage.
Sources reviewed July 17, 2026
- License type and every state of practice
- Employer, side practice, solo entity, or group
- Services, clients, settings, and supervision
- Telehealth, EHR, vendors, and patient locations
- Current declarations, retroactive date, and requirement
Start with the clinician's actual practice boundary
This page is for an individual therapist or counselor comparing personal and small-practice coverage. Employer work, private side work, a solo entity, telehealth, credentialing, and an office can create different insureds and policy questions.
Use this page for
- A clinician checking what an employer policy does and does not address
- A therapist or counselor beginning private or side practice
- A solo clinician creating an LLC or DBA
- A clinician satisfying a payer, platform, facility, or lease requirement
- A clinician adding telehealth, another state, supervision, or a new service
A different buying task
- —A practice employing, contracting with, supervising, or billing for multiple clinicians
- —A full licensing, credentialing, HIPAA, or telehealth-compliance tutorial
- —Medication management, inpatient, residential, IOP, or specialized SUD programs
- —A promise that one platform, payer, landlord, or license has a universal limit
Start with the event that created the insurance need
A written requirement, business change, renewal, complaint, or possible claim can produce a different submission. Identify the event before guessing at a policy or limit.
| Trigger | What to review |
|---|---|
| Employer work versus side practice | Obtain the employer coverage explanation and identify work, entity, records, billing, clients, and states outside that role. |
| Credentialing, payer, or platform | Read the current written named-insured, limit, dates, form, certificate, and professional-service requirements. |
| Creating an LLC or DBA | Match the clinician, legal entity, trade name, billing/credentialing structure, services, locations, and policies. |
| Leasing or sharing an office | Review landlord evidence, non-professional liability, property, business interruption, additional-insured wording, and home/shared-space restrictions. |
| Telehealth or another state | List provider and patient locations, legal authority, vendors, records, emergency plan, and policy territory. |
| Renewal, complaint, or possible claim | Preserve notice, compare form type and retroactive date, disclose requested claims or circumstances, and avoid a continuity gap. |
Describe the license, services, clients, setting, and data flow
Malpractice eligibility and pricing depend on the clinician's actual work. Use operational facts instead of a generic occupation label.
| Practice fact | Questions that change the review |
|---|---|
| License and jurisdiction | Credential type and status, Utah and other states, supervision, and current authority for each location |
| Clients | Adults, couples, families, minors, groups, court-involved work, schools, EAP, and high-acuity populations |
| Services | Assessment, diagnosis, counseling, testing, supervision, consultation, crisis work, telehealth, and any specialized modality |
| Setting | Employer, home office, leased or shared suite, school, facility, client site, or remote only |
| Business structure | Individual, LLC or other entity, DBA, billing/credentialing entity, and individual or organization NPI |
| People and vendors | Solo work, administrative help, biller, intern, supervisee, contractor, EHR, cloud, telehealth, payment, and answering services |
Ask for policy evidence before assuming an employer covers you
An onboarding statement is not enough to answer portability, side-practice, limits, notice, board-defense, or post-employment questions.
| Question | What to verify | Why it matters |
|---|---|---|
| Who is insured? | Named entity, insured-person definition, clinician status, and roster conditions | The employer can be insured without providing a portable personal policy. |
| Which work is covered? | Professional services, clients, settings, states, volunteer work, teaching, supervision, and side practice | Work outside the employer role may fall outside the described operation. |
| Who controls notice and defense? | Reporting contact, consent, counsel, cooperation, and access after employment | The employer usually controls the policy relationship. |
| Are limits shared? | Per-claim, aggregate, entity and clinician limits, defense erosion, and retention | One limit may be shared across people and claims. |
| What happens after leaving? | Occurrence or claims-made form, retroactive date, prior acts, tail, and former-worker wording | A later allegation may involve work performed during the old job. |
| Is board defense included? | Trigger, sublimit, counsel, deductible, consent, and exclusions | Licensing-defense features are separate and vary by policy. |
Match the allegation or event to the policy review
Professional liability should be reviewed alongside cyber/privacy, general liability, property/BOP, workers compensation, and employment practices when the clinician operates a business. Insurance does not create licensure, credentialing, or HIPAA compliance.
| Scenario | Coverage or feature to review | Why the label is not enough |
|---|---|---|
| Alleged clinical error, omission, boundary issue, or professional harm | Malpractice or professional liability | License, services, client, allegation, exclusions, dates, and form type control. |
| Licensing complaint, subpoena, or record request | Board-defense, disciplinary, or subpoena feature | These features may be limited, sublimited, or absent. |
| Exposed records, ransomware, or vendor incident | Cyber/privacy and breach response | A malpractice form or compliant vendor does not make the whole practice secure or compliant. |
| Visitor fall or non-professional office injury | General liability or BOP | A landlord request and premises event involve different policy language from malpractice. |
| Office contents or interruption | Property/BOP and business-income coverage | Home, shared-space, and commercial-policy treatment varies. |
| Employee, contractor, intern, or supervisee | Workers compensation, EPLI, and professional insured status | Tax labels and supervision arrangements require separate review. |
Insurance does not grant permission to practice
HHS directs behavioral-health providers to consider legal authority where the provider and patient are located. List every provider state, patient state, modality, vendor, record location, emergency process, and coverage territory, then confirm current permission with the relevant boards.
- Provider and patient location for each telehealth relationship
- Current license, compact, registration, or other lawful pathway
- Policy territory and covered telehealth services
- Emergency plan, vendor, records, privacy, and security controls
Use precise language when HIPAA applies
Not every provider is automatically a HIPAA covered entity. Determine the role and covered transactions, identify business associates and cloud vendors, maintain the required risk analysis where applicable, and map breach response. Insurance can finance eligible events; it does not create compliance.
Compare occurrence and claims-made timing before changing policies
Occurrence coverage generally keys to when an eligible incident happened. Claims-made coverage also depends on the claim or report date and retroactive date. Before replacing coverage or leaving employment, compare prior acts, known circumstances, reporting duties, other insurance, and extended-reporting options.
Retroactive date
How far back eligible professional services may reach, subject to the form.
Prior acts
Whether earlier work is accepted when a policy starts or changes.
Reporting
When a claim or circumstance must be reported under the policy.
Replacement or tail
How continuity or an extended reporting period is addressed when coverage ends.
Prepare the facts that change underwriting
- License type, status, and every provider and patient state
- Employer, individual, entity, DBA, billing, credentialing, and group relationships
- Services, client populations, settings, annual visits, and revenue
- Telehealth percentage, vendors, record flow, and emergency approach
- Credentialing, platform, facility, school, or lease requirement
- Employer coverage documentation and current personal/entity declarations
- Policy form, retroactive date, desired continuity, loss history, and requested claims or circumstances
- Staff, contractors, supervisees, office, property, and cyber facts
Why a national average is not a useful quote
Pricing and carrier appetite depend on the actual professional services, limits, people, contracts, controls, continuity, and loss history. Important factors include:
- License and professional services
- Client populations and acuity
- States and telehealth footprint
- Visits, revenue, and limits
- Entity, workforce, and supervision
- Occurrence or claims-made form
- Prior acts, claims, and board history
- Office, property, vendors, and cyber controls
Verify the rule or requirement at its source
Licensing, contract, compliance, and insurance requirements are different. These sources support the dated context on this page; the current agency instructions, written agreement, application, and policy still control.
Behavioral-health telehealth licensure
Provider and patient location, licensure pathway, malpractice, and emergency-plan context.
HIPAA covered entities and business associates
Avoid a universal HIPAA-covered-entity claim.
HIPAA security risk analysis
Whole-practice security context where HIPAA applies.
HHS cloud computing guidance
Cloud-provider, business-associate agreement, and risk-analysis context.
HHS breach notification
Privacy and cyber incident-response context.
Utah clinical mental-health counselor licensing
Current Utah CMHC licensing entry point.
Utah social work
Current Utah social-work source routing.
Utah marriage and family therapy
Current Utah MFT licensing entry point.
Utah psychology laws and rules
Current Utah psychology source routing.
CMS NPI fact sheet
Individual Type 1 and organization Type 2 identifier distinction; an NPI does not create coverage.
Build a useful insurance submission
Answer the operating questions, then send the requirement through a secure continuation path. Do not place patient, client, consumer, account, claim, or other sensitive records in an ordinary marketing message.
How do you practice?
Therapist & Counselor Malpractice Insurance questions
Is malpractice insurance the same as professional liability for a therapist?+
They are commonly overlapping market labels. The covered professional services, policy definitions, exclusions, limits, and occurrence or claims-made timing determine the actual protection.
Does Utah require every therapist or counselor to carry malpractice insurance?+
The Utah licensing sources linked here should be checked for the current credential and facts; this page does not claim one universal mandate for every clinician. An employer, payer, facility, platform, landlord, or contract may impose its own requirement.
Am I covered by my employer's malpractice policy?+
Possibly, for eligible work within the employer's policy. Verify insured-person status, professional services, limits, notice and defense control, outside work, and what happens after employment ends.
Will my employer policy cover a private side practice?+
Do not assume it will. Side work should be disclosed and may need separate personal and entity coverage, especially when the clinician controls billing, records, telehealth, or an office.
Does a policy in my name cover my LLC or DBA?+
Not automatically. Confirm every legal and trade name, how the practice bills and credentials, and the policy's entity and insured-person provisions.
Does telehealth malpractice insurance let me see clients in any state?+
No. Insurance does not create licensure or legal permission to practice. Confirm authority where the provider and patient are located and confirm the policy territory and covered services.
What is the difference between claims-made and occurrence malpractice coverage?+
Occurrence coverage generally keys to when an eligible incident occurred. Claims-made coverage also depends on when the claim is made or reported and the retroactive date. The actual policy controls.
What are prior acts and tail coverage?+
Prior-acts treatment can address eligible work after the retroactive date. An extended reporting period may allow later reporting under stated conditions after coverage ends. Neither should be described without the policy.
Does malpractice insurance cover licensing-board complaints?+
Some policies offer separate or limited disciplinary-defense features. Verify the trigger, counsel selection, sublimit, deductible, exclusions, and notice requirements.
Do I need cyber insurance if I use an EHR or telehealth platform?+
A malpractice policy does not automatically provide full breach, ransomware, privacy, restoration, or interruption coverage. Review the practice's data, vendors, agreements, security controls, and cyber form.
Does using a HIPAA-compliant platform make my practice HIPAA compliant?+
No single vendor or insurance policy makes the whole practice compliant. Where HIPAA applies, HHS guidance addresses organization-wide risk analysis, safeguards, agreements, and procedures.
Do I need general liability for a home or leased office?+
It may be relevant for non-professional injury, landlord requirements, contents, and business interruption. Home policies can restrict business activity, and a lease may request specific evidence or endorsements.
Are supervision, couples work, minors, or testing automatically covered?+
Never assume they are. Disclose every service, population, credential, and supervision arrangement so eligibility and covered-professional-services wording can be reviewed.
What should I send Redoubt for a therapist insurance review?+
Send license types and states, services, populations, settings, entity names, telehealth, staff or supervisees, current policy and retroactive date, and the redacted requirement. Never send patient records through a marketing form.
Continue with the page that owns the next decision
These links separate individual and entity intent, specialized professional work, workforce questions, and vehicle use instead of treating every profession as one generic policy.
Mental health group practice insurance
Use the entity-and-roster path when the practice employs, contracts with, supervises, or bills for other clinicians.
Business insurance by profession
Return to the directory and choose the business or practice that matches the work.
Utah workers compensation
Review Utah workforce questions when the practice hires or contracts with other people.
Send the document before guessing at coverage.
Redoubt can review the requirement and identify the entities, people, professional services, dates, controls, and supporting policies needed for a useful submission.