Aesthetic Clinic Insurance: The 5 Policies You Need
The short answer
An aesthetic clinic needs five coverage types: professional liability (malpractice) for clinical claims, general liability for premises incidents, cyber liability for PHI breaches, workers' compensation for staff, and property with business-interruption coverage. Premiums vary by provider mix, state, and revenue; an insurance broker who knows aesthetics prices the bundle properly.
Key takeaways
- Malpractice is the anchor policy, priced by provider type and delegation structure; verify every injector is actually covered under it.
- Cyber liability is now core, not optional: client photos and health histories are PHI, and breach costs are real.
- Workers' comp is legally required in most states once you employ staff; classification mistakes surface at audit time.
- Re-shop the bundle when services change: adding lasers, IV therapy, or weight-loss prescribing changes the risk profile insurers priced.
Professional liability (malpractice) insurance
Malpractice insurance covers claims arising from clinical negligence, treatment complications, and adverse outcomes. In aesthetic medicine, common claims include: filler complications (vascular occlusion, infection, asymmetry), Botox adverse effects (ptosis, allergic reaction), laser burns or scarring, and dissatisfaction with results (although dissatisfaction alone is rarely actionable). Coverage limits: $1 million per occurrence / $3 million aggregate is the standard for aesthetic providers. Some states require higher limits.
Cost by provider type: physicians (MD/DO), $3,000 to $8,000/year (varies dramatically by specialty and state; aesthetic-focused physicians typically pay less than surgeons), NPs and PAs, $1,500 to $4,000/year, RNs performing aesthetic procedures, $500 to $1,500/year, and estheticians, $300 to $800/year. Both the individual provider AND the clinic entity need separate malpractice policies. The clinic's policy covers the business; the individual policy covers the provider personally. Never assume the clinic's policy covers individual providers, verify with your broker.
General liability insurance
General liability covers non-medical claims: client slips and falls in the clinic, property damage, advertising injury (defamation, copyright infringement in marketing materials), and product liability (if you sell skincare products). Coverage: $1 million per occurrence / $2 million aggregate. Cost: $800 to $2,500/year for a typical med spa. This policy is often bundled with property insurance in a Business Owner's Policy (BOP) for cost savings. Every commercial lease requires proof of general liability insurance, your landlord will not let you move in without it.
Cyber liability insurance
Aesthetic clinics store protected health information (PHI): client names, treatment records, photos, payment information. A data breach triggers HIPAA notification requirements that cost $50,000 to $500,000 or more to resolve (notification mailings, credit monitoring, forensic investigation, legal fees, potential OCR fines). Cyber liability insurance covers: data breach response costs, client notification expenses, credit monitoring services, legal defense costs, regulatory fines and penalties, and business interruption from a cyber event. Coverage: $1 million is standard. Cost: $1,000 to $3,000/year. This is arguably the most underinsured risk in aesthetic medicine, most clinics carry no cyber coverage despite storing thousands of client records electronically.
Workers' compensation
Workers' comp is required in nearly every state for clinics with employees (requirements vary, some states exempt businesses with fewer than 3 to 5 employees). It covers employee injuries that occur at work: needlestick injuries, slips and falls, repetitive strain injuries, and exposure to chemicals or laser radiation. Cost: $1,500 to $5,000/year depending on payroll size, state rates, and claims history. Classified under medical office risk codes, which are relatively low-cost compared to construction or manufacturing.
Business interruption and property insurance
Property insurance covers damage to your physical space and equipment: fire, water damage, theft, and vandalism. A single laser device or CoolSculpting unit represents $100,000 to $300,000 in equipment, uninsured loss of that equipment could close the clinic. Business interruption insurance covers lost revenue if you cannot operate due to a covered event (fire damage to the building, for example). Coverage should equal 6 to 12 months of operating expenses. Cost: $1,000 to $3,000/year combined.
Insurance is the cost of staying in business
Total annual insurance budget for a starter med spa with 2 providers: $12,000 to $22,000 ($1,000 to $1,800/month). This is approximately 1% to 2% of revenue for a clinic generating $100,000/month. It is the least exciting line item in the budget and the most important one. One malpractice claim without coverage, one data breach without cyber insurance, or one employee injury without workers' comp can generate liabilities that exceed the total value of the business. Pay the premiums. Every month. Without exception.
Insurance is one line of the startup budget; the full picture is in the med spa cost guide, and Gracero's flat pricing keeps the software line predictable.
Frequently asked questions
Does the medical director's policy cover the clinic's injectors?
Not automatically, and assuming it does is one of the costliest mistakes in the industry. Coverage follows the named insureds and the delegation arrangements on the policy. Every prescribing physician, NP, PA, and RN needs verified coverage for the specific procedures they perform, and the clinic entity usually needs its own policy on top; confirm this in writing with your broker and counsel.
What does cyber liability insurance actually cover?
Breach response costs (forensics, notification, credit monitoring), regulatory defense and fines where insurable, and liability from exposed client data. Aesthetic clinics hold exactly what attackers want: photos, health histories, and payment details in one place. Insurers increasingly require basics like encryption, access controls, and staff training before they'll write the policy, so the application doubles as a security checklist.
When should a clinic re-shop its insurance?
At every service-line change and at least every couple of years. A policy priced for an injectables-only practice doesn't contemplate laser treatments, IV drips, or GLP-1 prescribing; adding a service without notifying the carrier can leave the new line effectively uninsured. Renewal is also when a broker who knows the aesthetic niche can re-price the whole bundle against current markets.
Are these policies a legal requirement or just prudent?
It depends on the policy and the state: workers' compensation is mandated in most states once you have employees, some states require malpractice minimums for certain providers, and landlords or lenders often require general liability and property coverage by contract. The rest are prudence with teeth. Verify the specific requirements for your state with your broker and counsel rather than a checklist.
Search marketing and AI visibility specialist. Covers clinic software, technical SEO, AI Overview optimization, and performance marketing for healthcare and aesthetic businesses.