Physical therapy is one of the fastest-growing corners of healthcare right now, and the growth isn’t just in patient volume. More PTs are leaving hospital systems and large groups to open their own clinics, run cash-pay practices, and build something they own. The clinical side of that transition is familiar territory. The insurance side is where new owners consistently get caught.
Most PTs opening a clinic start and stop with malpractice coverage. It’s the policy they’ve carried their whole career, so it feels like the box is checked. But the moment you become an owner, malpractice is just one layer of what you actually need. A patient who slips in your waiting room, a ransomware attack on your scheduling software, an employee injured moving equipment, a fire that closes your space for a month: none of those are malpractice claims, and none of them are covered by a professional liability policy.
This is the full insurance stack a PT clinic needs, what each layer actually does, and the order to put them in place.
Why Isn’t Malpractice Insurance Enough for a PT Clinic?
Professional liability (malpractice) insurance covers one specific category of risk: claims that your professional services caused harm. A patient alleges your treatment injured them, your documentation is questioned, a manual therapy session leads to a complaint. That’s what malpractice responds to, and every practicing PT needs it.
But owning a clinic creates a whole category of exposure that has nothing to do with clinical care. You now have a physical space the public walks into. You have employees. You have business equipment, patient data, and revenue that depends on your doors staying open. Each of those creates a different kind of risk, and each is addressed by a different type of coverage.
Think of malpractice as the foundation. The rest of the stack is what turns an individual clinician’s coverage into a protected business.
What Insurance Does a PT Clinic Actually Need?
Here are the layers, in roughly the order of how essential they are for a clinic owner.
Professional liability (malpractice). Covers claims that your clinical services caused harm, including legal defense and any settlement or judgment. For clinic owners, group professional liability covers your business entity and the PTs, PTAs, and aides working under it, all under one policy. This is the base layer.
General liability. Covers non-clinical incidents at your location: a patient slips on a wet floor, a visitor trips over equipment, property gets damaged. Patient falls are one of the most common incident types at PT clinics, and many of them happen outside the treatment itself, in the waiting area, hallway, or gym floor. General liability is also what most landlords require before they’ll sign a lease. CM&F offers it as an add-on to PT group policies.
Workers’ compensation. Required in most states the moment you have employees. PT clinics carry real physical risk for staff: lifting and transferring patients, demonstrating exercises, moving equipment. A therapist who injures their back assisting a patient is a workers’ comp claim, not a malpractice claim. Most states mandate this coverage once you have even one employee.
Cyber liability. Covers data breaches, ransomware, and HIPAA exposure. If your clinic uses scheduling software, an EHR, a patient portal, or electronic billing, you’re storing protected health information that’s a target. The coverage exists to handle breach response, legal costs, and the claims that follow when patient data is compromised. Smaller practices are increasingly targeted precisely because they tend to have lighter security.
Business owner’s policy (BOP). Bundles general liability with commercial property coverage, often at a better rate than buying them separately. If you own or lease a space with equipment, a BOP protects the physical assets and can include business interruption coverage, which replaces lost income if a fire, flood, or other covered event forces you to close temporarily.
Commercial auto and umbrella. If your clinic owns vehicles or provides any in-home or mobile PT, commercial auto becomes relevant. An umbrella policy sits on top of your other coverage and extends your limits when a large claim exceeds what an underlying policy covers.
Not every clinic needs every layer on day one. But every owner should know which ones apply to their model and have a plan for each.
When Should Each Layer Be in Place?
Timing is where new owners trip up. The instinct is to get malpractice and figure out the rest later. The problem is that “later” often arrives as a claim.
- Professional liability (group): Before the business entity treats its first patient
- General liability: Before signing your lease (landlords typically require proof) and before opening to the public
- Workers’ compensation: Before your first employee’s start date, as required by your state
- Cyber liability: Before you collect any patient data digitally, meaning before your EHR and scheduling system go live
- BOP / property: Before you move equipment and build-out into the space
- Commercial auto / umbrella: Before any mobile services begin, or once your revenue and assets are large enough that your base limits feel thin
The pattern: most of these need to be active before you open, not after you’re established. A coverage gap on opening week is the most expensive kind, because it’s the period when everything is new and mistakes are most likely.
Does My PT Insurance Cover Dry Needling?
Dry needling is one of the most common coverage questions PTs ask, and it’s a fair one, because the answer depends on your state and your policy.
Dry needling sits in contested territory. Whether it falls within a PT’s scope of practice is decided state by state, and the rules continue to shift as state boards and legislatures revisit the question. Some states explicitly permit it with specific training requirements, some restrict it, and a few prohibit it for PTs entirely.
Here’s the principle that matters for coverage: a professional liability policy generally covers procedures that fall within your state’s legal scope of practice, provided you have the required training and certification. CM&F policies automatically conform to your state’s scope of practice, so if dry needling is within your authorized scope and you’re properly trained, it’s covered as part of your professional services.
What creates exposure is performing dry needling in a state where it’s outside PT scope, or without the training your state requires. That’s not a coverage question at that point, it’s a scope-of-practice violation, and no policy protects against practicing outside your legal authority. Before adding dry needling to your clinic’s services, confirm three things: that it’s within PT scope in your state, that you and any staff performing it hold the required certification, and that your policy reflects the services you’re actually offering.
What About a Cash-Pay or Hybrid Clinic?
Cash-pay and hybrid PT models have grown quickly as therapists look for alternatives to declining insurance reimbursement and the administrative load of payer contracts. The clinical work is the same. The insurance stack is largely the same too, with a few wrinkles.
A cash-pay clinic still needs the full stack: professional liability, general liability, workers’ comp once you have staff, and cyber coverage for patient data. Going cash-pay doesn’t reduce your liability exposure. If anything, the longer one-on-one sessions and hands-on, concierge-style care that define many cash practices mean more direct treatment time per patient, which is the time when manual therapy and clinical claims arise.
The main difference is on the business side: cash practices often have different revenue patterns, may rely more heavily on digital marketing and online booking (raising the cyber and advertising-injury considerations), and sometimes operate from smaller or shared spaces that change the general liability and property picture. The coverage categories don’t change. The specifics within them might.
How Do Group Policies Work as You Add Staff?
When you’re a solo PT, an individual professional liability policy covers you. The moment you bring on another therapist, a PTA, or an aide, you need group professional liability that covers the business entity and everyone practicing under it.
A group policy protects the clinic itself when it’s named in a claim, which matters because a patient suing over an incident will typically name both the treating clinician and the business. It also means your staff are covered for the services they provide under your clinic, rather than each carrying only their own individual coverage with the business left exposed.
As you grow, the group policy scales with you. Adding locations, adding providers, expanding services: these are adjustments to the policy rather than reasons to start over. CM&F also partners with PT networks like Private Practice Network and Rehab Net to offer members coverage that includes business owner’s, cyber, and workers’ comp options.
Key Takeaways
Malpractice insurance is the foundation of a PT clinic’s coverage, not the whole structure. Owning a clinic creates non-clinical risks (patient falls, data breaches, employee injuries, property loss) that professional liability does not cover.
The full stack includes professional liability, general liability, workers’ compensation, cyber liability, and often a business owner’s policy. Commercial auto and umbrella coverage apply depending on your model.
Most layers need to be active before you open, not after. The order matters: group professional liability before treating patients, general liability before signing a lease, workers’ comp before your first hire, cyber before patient data goes digital.
Dry needling is covered when it’s within your state’s PT scope of practice and you hold the required training. The risk isn’t a coverage gap, it’s performing it outside your legal scope.
Cash-pay and hybrid clinics need the same stack as insurance-based practices. Going cash-pay doesn’t reduce liability exposure.
As you add staff, group professional liability covers both your clinic and the providers working under it, and it scales as you grow.
Frequently Asked Questions
- What insurance does a physical therapy clinic need?Beyond professional liability (malpractice), a PT clinic typically needs general liability for patient falls and property damage, workers’ compensation once you have employees, and cyber liability to protect patient data. Many owners also add a business owner’s policy (BOP) that bundles general liability with property coverage, and commercial auto or umbrella coverage depending on their model. Malpractice is the foundation, but it does not cover non-clinical risks like slip-and-fall incidents, data breaches, or employee injuries.
- Does physical therapist insurance cover dry needling?A professional liability policy generally covers dry needling when it falls within your state’s PT scope of practice and you hold the required training and certification. CM&F policies automatically conform to your state’s scope of practice, so if dry needling is authorized in your state and you are properly trained, it is covered as part of your professional services. Performing dry needling outside your state’s legal scope is a scope-of-practice violation that no policy protects against. Confirm it is within PT scope in your state and that your policy reflects the services you offer.
- Does a cash-pay PT clinic need the same insurance as an insurance-based clinic?Yes. Going cash-pay does not reduce your liability exposure. A cash-pay or hybrid PT clinic still needs the full stack: professional liability, general liability, workers’ compensation once you have staff, and cyber coverage for patient data. The longer one-on-one sessions common in cash practices often mean more direct treatment time per patient, which is when manual therapy and clinical claims tend to arise. The coverage categories are the same; the business-side specifics may differ.
