What a medical malpractice policy can exclude or limit.

A medical malpractice policy is not a blanket promise for every activity connected to a practice. Start with the insuring agreement, then read the exclusions, sublimits, conditions, definitions, declarations, and endorsements together.

Use a real change as the test: a physician agrees to serve as a medical director, adds an injection service, or begins telehealth across state lines. Which person and entity will perform the work? What professional service does the policy describe? Which exclusion, limit, condition, or endorsement could change the answer? A title, application, certificate, or broker message does not settle those questions.

Medical-director and administrative work

A medical-director agreement can state clinical and administrative responsibilities that differ from direct patient care and from the policy's definition of professional services. Coverage does not validate the role, entity structure, scope, or California clinical-control arrangement.

Confirm whether the issued policy covers each actual duty. Some forms can require an endorsement or separate coverage for a medical-director role; others can define the role differently.

Map the agreement, entity, facility, duties, compensation, contract indemnity or additional-insured request, and policy wording. Describe the relevant facts accurately when an application asks for them. Do not rely only on the title "medical director."

Licensing and regulatory proceedings

A state licensing-board inquiry or accusation is not the same as a medical-malpractice civil claim, credentialing matter, payer dispute, or employer proceeding. Each can have a different trigger and coverage path.

Some medical malpractice policies include a sublimit for licensing or administrative defense. The sublimit is a smaller amount for the specified proceeding.

Check the covered proceedings, investigation-versus-formal-proceeding trigger, dollar sublimit, deductible or self-insured retention, counsel selection, exclusions, defense-cost erosion, insured or entity, and notice requirement. A separate regulatory-defense product may be available, but its issued terms require a separate review.

Cyber and privacy events

A ransomware event or medical-record breach requires a fact-specific assessment of the data owner, evidence, HIPAA or California duties, and vendor contracts. A medical-malpractice policy can exclude response costs, limit them, or address them under a separate coverage part.

Map the records, systems, vendors, locations, and entity that own or control the data. Compare that exposure with the actual cyber policy, any malpractice-policy sublimit, and the vendor contracts. A vendor's security label is not insurance coverage.

Work that the application does not describe

The carrier uses the application to classify and price the practice. A procedure, location, moonlighting role, aesthetic service, or supervision duty can create an underwriting, notice, endorsement, exclusion, or coverage question when it differs from the facts represented or the issued terms. The legal and policy effect of an application representation is fact-specific.

Compare the application with the current practice. Report a new clinician, entity, location, procedure, or service when the policy requires notice. Do not assume that a request, application update, certificate, or broker conversation amended the policy.

Keep the signed application with the policy. Obtain the executed endorsement or policy amendment that actually addresses an accepted change. A quote, application update, certificate, or broker email does not substitute for issued coverage terms.

Aesthetic services

An internist can add injections or a physician can consider a cosmetic-service role. These services can change the clinical, regulatory, underwriting, and coverage questions. A clinical title or an insurance discussion does not establish a lawful ownership, control, or scope arrangement.

List the procedures, personnel and license status, entity and ownership, facilities, geographic work, patient population, products or devices, advertising where relevant, and supervision duties. Then compare the real service with the professional-services grant, classifications if any, limits, exclusions, conditions, and endorsements.

Compare the practice with the policy each year

List all direct patient care, administrative work, telehealth, outside work, supervision, data systems, and entities. For each item, record the controlling document and one of four working results:

The issued terms appear to include the work, subject to conditions and facts.
The work appears to be limited by a sublimit, condition, or endorsement.
The work appears to fall outside the grant or within an exclusion.
The documents do not answer the question clearly and need written clarification or coverage review.

Identify a material gap before the work begins. The next step may be an endorsement, separate policy, service redesign, carrier comparison, or a decision not to proceed. If work has already started, check retroactive or prior-acts, known-matter, professional-services, and notice terms before assuming an after-the-fact change repairs it. Keep the decision with the issued documents so the next renewal does not require reconstructing it from email.