Medical Malpractice Insurance for California MSO-Managed Practices

An MSO relationship often begins with a sensible business problem. A medical practice needs space, payroll, technology, scheduling, billing support, purchasing, or marketing. The management services organization can provide those systems. The risk begins when no one can tell where business support ends and clinical control begins.

Imagine a Monday morning when the scheduling platform is unavailable and the lease is in a different entity. The call center has a script the physicians did not approve. The medical practice cannot export its patient list. The question is no longer whether the management agreement is well drafted. The question is whether patients can still reach the people responsible for their care.

California's corporate-practice rules make that question more than a business concern. A management structure must leave clinical judgment and the decisions that control clinical care with the right people. Insurance then has to describe the actual people, entities, assets, and work that the structure creates.

Begin with two businesses, not one brand

An MSO-managed practice commonly has at least two separate businesses: the medical practice that provides professional care and the organization that provides administrative services. They may share an address, a website, staff, software, or a public brand. None of those facts tells you which entity employs a person, owns a record, signs a contract, or is insured.

Start with an entity-and-work map:

Question	The map should identify
Who provides professional care?	The lawfully organized medical practice, its clinicians, services, locations, and clinical leaders.
Who supplies business services?	The MSO, its staff, systems, assets, contracts, fee, and service levels.
Who controls records and access?	The physician or practice authority over record content, the system custodian, access and export rights, and patient-request duties.
Who employs each person?	The employer, supervisor, work performed, location, and access to patient information.
Who is insured for which work?	Each named or additional insured, the policy involved, limits, and endorsements.

California Business and Professions Code section 2406 permits a medical corporation to render professional services when it and the relevant people comply with the governing law. Do not treat the corporate label as the entire answer. The structure, contracts, and daily operations must show who actually provides care and who makes the decisions that shape it.

Separate business support from clinical control

Business and Professions Code section 2400 says corporations and other artificial entities have no professional rights, privileges, or powers. The Medical Board explains that the rule is meant to prevent unlicensed people from influencing a physician's professional judgment.

The Board identifies diagnostic testing, referrals, treatment options, overall patient care, patient volume, and physician work hours as clinical decisions that a California-licensed physician should make. It also identifies medical records, clinical hiring and firing, payer-contract parameters, coding and billing procedures, and medical equipment as business decisions that can improperly control medical practice when unlicensed people make them.

The distinction is easiest to test in the work itself:

If the MSO helps with…	The medical practice should still be able to…
Scheduling and call-center systems	Set clinical availability, approve clinical scripts, and protect urgent access to care.
Billing support and payer administration	Approve clinical coding and the clinical parameters of payer relationships.
Staffing and HR support	Make clinical competency decisions about physicians and clinical staff.
Equipment, facilities, and purchasing	Approve the medical equipment and supplies used in patient care.
Records and technology	Control clinical records and preserve continuous access for patient care.

The MSO may advise, administer, or supply information. The Medical Board says the physician may consult unlicensed people about these matters, but must retain ultimate responsibility for or approval of the decisions. A contract clause is only the start. System permissions, escalation paths, budgets, and daily approvals must make the same division of authority real.

Treat the management agreement as an operating document

The management agreement should not read like a list of services the practice will never inspect again. Use it as a working map. For each service, identify the people, data, asset, access right, performance standard, price, decision owner, and exit step.

The important questions are ordinary ones. Who can change a call script? Who approves a new procedure or clinical device? Who can remove a clinician from the schedule? Who can see and export the patient record? Who responds when a patient needs a result after the normal business day? If the agreement, the system setting, and the person's actual authority give three different answers, the practice has a control problem.

Build a continuity plan before a disagreement or termination makes it urgent. It should address patient communication, record access and export, phone numbers, scheduling, pending tests, referral queues, prescription renewal, website notices, essential equipment, vendor accounts, and staff instructions. Ending an agreement does not itself complete a safe clinical handoff.

Follow the money without confusing it with the care decision

Fees, loans, lease terms, security interests, sweep rights, guarantees, and default remedies can affect who has power in an MSO structure. List each payment and each right to direct, approve, block, or take an asset. Then ask whether the arrangement reaches a decision that California reserves to the medical practice.

This is not an argument that every fee, loan, or administrative service is prohibited. It is a reason to examine the actual rights. A physician may use business advice. The Medical Board's guidance focuses on who retains ultimate responsibility for or approval of the decisions that affect medical practice.

Keep the record precise. State the service, fee formula, payer, payee, timing, assets involved, approval rights, and termination effect. A clear record lets the practice, its advisers, and its insurers understand the structure without reconstructing it from invoices and emails.

Review the special rule for private equity and hedge funds

California Senate Bill 351, approved in 2025, added Health and Safety Code sections 1190 through 1192. It applies to private equity groups and hedge funds involved with physician or dental practices doing business in California, subject to statutory definitions and exclusions. It does not replace the corporate-practice doctrine. It adds restrictions for the covered investor arrangements.

For a covered private equity group or hedge fund, section 1191 prohibits interference with specified professional judgments. It also bars control over listed decisions, including patient medical records, clinical-competency staffing decisions, payer-contract parameters, coding and billing, and medical equipment. It makes prohibited contract provisions void and unenforceable and limits certain provider noncompete and speech restrictions in covered management and asset-sale arrangements.

Do not infer that every MSO, lender, hospital system, or investor is covered. The statutory definitions matter. Review the parties, ownership chain, management agreement, asset rights, and reserved powers against the statute before a transaction closes or a contract changes.

Insurance follows the entity and the activity, not the logo

Insurance should begin with the entity-and-work map, not a list of policy names. The California Department of Insurance explains that commercial policies address different exposures. Medical professional liability, property, general liability, employment, cyber, and other coverages may address different activities, entities, or events. The policy and endorsements decide what is insured.

For each policy, identify the named insureds, additional insureds, insured activities, locations, limits, exclusions, effective dates, reporting duties, and contract requirements. Then compare that record with the entities and work in the management agreement. A shared address, public brand, or common owner does not show that two entities share coverage.

Medical malpractice coverage also needs a dated record. The NAIC explains that occurrence coverage generally responds to incidents during the policy period. Claims-made coverage generally responds under the policy active when the claim is reported, subject to policy terms and any extended reporting period. Review the actual retroactive or prior-acts grant, known-claim and related-claim terms, notice conditions, and extended-reporting terms before assuming earlier work has a reporting path. That distinction matters if the medical practice, MSO, insurer, or management agreement changes. The claims-made guide explains how to review the timeline.

Test the structure when it changes

Before a material change takes effect, compare the management agreement, entity map, authority map, clinical workflows, policy documents, and continuity plan. Do this when the parties change ownership, investor rights, fee terms, staff, records, systems, equipment, locations, services, assets, or contracts.

The most useful closing question is simple: if a patient needs care tomorrow and the MSO is unavailable, who can make the clinical decision, access the record, reach the patient, and keep the care moving? When the documents and the daily workflow give the same answer, the structure is easier to manage and easier to insure.

An MSO can run important business systems. It cannot become the practice of medicine.