Med spa insurance isn't a single policy. It's a combination of coverages designed to protect your practice from the unique risks of operating at the intersection of healthcare and aesthetics. Whether you're opening a new medical spa or reviewing your existing medspa insurance, this checklist covers every policy you should consider.
The Complete Med Spa Insurance Checklist
Here's every insurance policy a med spa should evaluate, ranked by priority:
| Policy | What It Covers | Required? | Typical Annual Cost |
|---|---|---|---|
| Malpractice / Professional Liability | Treatment injuries, medical negligence | Essential | $5,000 to $7,500 |
| General Liability | Slip-and-fall, property damage, advertising injury | Essential | $500 to $2,000 |
| Commercial Property | Building, equipment, inventory | Essential | $1,000 to $3,000 |
| Workers' Compensation | Employee workplace injuries | Required by law in most states | $2,000 to $5,000 |
| Cyber Liability | Data breaches, HIPAA violations | Strongly recommended | $1,000 to $2,000 |
| EPLI | Wrongful termination, discrimination, harassment claims | Recommended (3+ employees) | $800 to $2,000 |
| Commercial Umbrella | Extends limits on underlying policies | Recommended | $500 to $1,500 |
| Product Liability | Injuries from products sold or used | Often included in GL | Included or $300 to $800 |
| Business Interruption | Lost income from covered events | Recommended | Often bundled in BOP |
Sources: Insureon, Novatae, Griffith E. Harris
Professional Liability / Malpractice Insurance
Malpractice insurance (also called professional liability insurance) is the most critical policy for any med spa. It covers claims that a medical treatment caused patient injury due to negligence, error, or omission.
This is the policy that responds when a patient alleges a laser treatment burned their skin, an injectable caused nerve damage, or a chemical peel led to permanent scarring. Without it, your med spa would pay for legal defense and any settlements out of pocket.
What med spa malpractice insurance covers:
- Treatment injuries (burns, scarring, infections, nerve damage)
- Adverse reactions to products or injectables
- Failure to obtain informed consent
- Negligent supervision of non-physician providers
- Off-label use of devices or products
Typical limits: $1,000,000 per claim / $3,000,000 aggregate
Typical cost: $5,000 to $7,500 per year for an entity policy
You'll need to choose between occurrence and claims-made policy structures, and understand the difference between malpractice and professional liability terminology (for med spas, they're the same thing).
Every practitioner who touches patients should have individual coverage in addition to the entity policy. This includes physicians, nurse practitioners, PAs, RNs, and aestheticians performing medical procedures.
General Liability Insurance
General liability (GL) insurance covers non-medical risks that come with operating a physical business location. It protects your med spa when someone is injured on your premises or your business operations cause property damage to a third party.
What GL covers:
- Bodily injury: A client slips on a wet floor in your waiting room.
- Property damage: Your operations damage a neighboring business or a client's belongings.
- Personal and advertising injury: A competitor claims your marketing defames their business.
- Product liability: A skincare product you sell causes an allergic reaction (often included in GL).
Typical limits: $1,000,000 per occurrence / $2,000,000 aggregate
Typical cost: $500 to $2,000 per year ($52/month median per Insureon)
GL does not cover treatment-related claims. That's what malpractice insurance is for. See our detailed comparison of general liability vs. malpractice insurance to understand the distinction.
Many landlords require a certificate of insurance showing GL coverage before you can sign a lease.
Commercial Property Insurance
Commercial property insurance covers the physical assets of your med spa, including the building (if you own it), equipment, furniture, inventory, and supplies. Med spas are particularly vulnerable to property losses because of the high cost of specialized medical equipment.
What property insurance covers:
- Building coverage: The physical structure (if you're the owner, not a tenant)
- Business personal property: Laser machines, IPL devices, cryotherapy units, treatment beds, computers, furniture
- Inventory: Skincare products, injectables, medical supplies
- Improvements: Tenant buildout and leasehold improvements
Why it matters for med spas: A single laser machine can cost $50,000 to $200,000. If a fire, water leak, or theft destroys your equipment, property insurance covers the replacement cost. Without it, rebuilding could bankrupt the practice.
Typical cost: $1,000 to $3,000 per year, depending on location, building value, and equipment inventory.
Property insurance is often bundled with general liability into a Business Owner's Policy (BOP), which is usually cheaper than buying each policy separately.
Workers' Compensation Insurance
Workers' compensation insurance covers medical expenses and lost wages for employees who are injured or become ill on the job. It's required by law in almost every state for businesses with employees.
What workers' comp covers:
- Medical treatment for workplace injuries
- Partial wage replacement during recovery
- Disability benefits (temporary or permanent)
- Death benefits for fatal workplace injuries
- Legal defense if an employee sues over a workplace injury
Med spa-specific risks: Repetitive strain injuries from performing treatments all day, exposure to chemicals and medical products, needlestick injuries, and slips or falls in treatment rooms.
Typical cost: $2,000 to $5,000 per year, based on payroll, number of employees, and state rates.
Important: Even if your state doesn't require workers' comp for small teams (some exempt businesses with fewer than 3-5 employees), carrying it protects you from personal liability if an employee is injured.
Cyber Liability Insurance
Cyber liability insurance covers the costs of data breaches, cyberattacks, and HIPAA violations that expose patient information. Med spas collect and store sensitive data, including medical histories, Social Security numbers, photos, and payment information, making them a target for hackers.
What cyber insurance covers:
- Data breach response: Notification costs, credit monitoring for affected patients, forensic investigation
- HIPAA fines and penalties: Regulatory fines for failing to protect protected health information (PHI)
- Ransomware and extortion: Costs to respond to ransomware attacks
- Business interruption: Lost income while systems are down after an attack
- Legal defense: Lawsuits from patients whose data was compromised
Why med spas need it: Under HIPAA, covered entities that experience a breach of unsecured PHI must notify affected individuals, the Department of Health and Human Services, and in some cases, the media. HIPAA penalties range from $141 to $2,134,831 per violation category per year (HHS).
Typical cost: $1,000 to $2,000 per year ($145/month median per Insureon).
Employment Practices Liability Insurance (EPLI)
EPLI covers claims from current, former, or prospective employees alleging wrongful employment practices. As your med spa grows and hires staff, the risk of employment-related lawsuits increases.
What EPLI covers:
- Wrongful termination
- Discrimination (age, gender, race, disability)
- Sexual harassment
- Retaliation
- Failure to promote
- Wage and hour disputes (in some policies)
Why med spas should consider it: The median cost to settle an employment practices claim is approximately $75,000, and defense costs alone can reach $50,000 to $100,000 even if you win (EEOC). EPLI is especially important once you have 3 or more employees.
Typical cost: $800 to $2,000 per year.
Business Owner's Policy (BOP)
A Business Owner's Policy (BOP) bundles general liability and commercial property insurance into a single, cost-effective package. For many med spas, a BOP is the most efficient way to cover premises-related risks.
A BOP typically includes:
- General liability
- Commercial property
- Business interruption coverage
- Equipment breakdown (sometimes optional)
What a BOP does not include: Malpractice insurance, workers' comp, cyber liability, or EPLI. These must be purchased separately.
Cost advantage: A BOP usually costs less than buying GL and property insurance as standalone policies. Expect to pay $1,500 to $4,000 per year for a med spa BOP.
Commercial Umbrella Insurance
Commercial umbrella insurance provides additional liability limits beyond what your underlying policies (GL, malpractice, auto) cover. If a lawsuit exceeds the limits of your primary policy, the umbrella kicks in.
Example: Your GL policy has a $1M limit. A patient falls in your parking lot, and the jury awards $1.8M. Your GL pays the first $1M, and your umbrella policy covers the remaining $800,000.
Typical limits: $1M to $5M (in addition to underlying limits)
Typical cost: $500 to $1,500 per year for $1M in umbrella coverage
Umbrella insurance is relatively inexpensive for the amount of protection it provides. We recommend it for any med spa with significant patient volume or revenue.
Product Liability Insurance
Product liability insurance covers claims that a product you sell or use in treatments caused injury to a patient. For med spas, this includes skincare products, topical treatments, and take-home products sold to clients.
Example: A patient purchases a medical-grade retinol from your med spa and suffers a severe chemical burn. Product liability covers the claim.
Product liability is often included in general liability policies, but check your policy to confirm. If you're private-labeling products or selling high volumes of retail skincare, you may need standalone product liability coverage.
Learn more about cosmetic injectables insurance and how product liability applies to injectable treatments.
How Much Does Med Spa Insurance Cost?
The total cost of a comprehensive med spa insurance program typically ranges from $8,000 to $20,000 per year. Here's a breakdown:
| Policy | Low Estimate | High Estimate |
|---|---|---|
| Malpractice | $5,000 | $7,500 |
| General Liability | $500 | $2,000 |
| Commercial Property | $1,000 | $3,000 |
| Workers' Comp | $2,000 | $5,000 |
| Cyber Liability | $1,000 | $2,000 |
| EPLI | $800 | $2,000 |
| Umbrella | $500 | $1,500 |
| Total | $10,800 | $23,000 |
These ranges are based on a typical med spa with 2 to 5 practitioners, offering standard aesthetic treatments, and operating in a moderate-risk state. For a detailed breakdown, see our med spa insurance cost guide.
Factors that increase costs:
- High-risk procedures (surgical, deep laser, GLP-1 weight loss)
- More providers on staff
- Higher revenue
- Prior claims history
- High-litigation states (FL, CA, NY, NJ)
How to Choose the Right Med Spa Insurance
Work with an independent insurance broker who specializes in medical spa insurance. A generalist broker may not understand the unique risks of medical aesthetics or know which carriers offer the best coverage for your specific treatments.
Steps to get properly covered:
- 1.List every service you offer. Your broker needs this to ensure your malpractice policy covers all treatments. Adding services later without updating your policy can create gaps.
- 2.Count your providers and their credentials. Physicians, NPs, PAs, RNs, and aestheticians all need coverage. Some carriers charge per-provider; others offer entity-level pricing.
- 3.Review your lease. Your landlord likely requires specific GL limits and an additional insured endorsement. Check before purchasing.
- 4.Assess your data exposure. If you store patient records electronically, accept credit cards, or use cloud-based scheduling, you need cyber coverage.
- 5.Bundle where possible. A BOP plus malpractice plus cyber is often cheaper than buying six standalone policies.
- 6.Compare carriers. An independent broker shops across multiple insurers. See our guide on the best med spa insurance carriers.
- 7.Start your med spa insurance application. We've created a guide to help you prepare the information carriers need.
Frequently Asked Questions
What is the most important insurance for a med spa?
Malpractice insurance (professional liability) is the most critical policy for any med spa. It's the coverage that protects you against the highest-cost risk: patient injury claims from medical treatments. A single malpractice lawsuit can exceed $500,000 in defense costs and settlements. General liability is a close second, and most states and landlords require it.
Can I bundle all my med spa insurance into one policy?
You can bundle some policies, but not all. A Business Owner's Policy bundles general liability and property insurance. Some carriers offer package programs that add malpractice to the same bill. But workers' comp, cyber liability, and EPLI are typically separate policies. An independent broker can coordinate all your coverages to minimize cost and avoid gaps. Learn more about med spa insurance coverage options.
Do independent contractors at my med spa need their own insurance?
Yes. Independent contractors should carry their own malpractice insurance. Your entity-level malpractice policy may or may not extend to independent contractors, depending on the carrier and policy terms. Even if it does, requiring contractors to carry their own coverage provides an additional layer of protection and is considered best practice. Review contractor agreements with your broker.
Is med spa insurance required by law?
It depends on your state. Some states require malpractice insurance for medical practices, while others don't mandate it but strongly recommend it. Workers' compensation is required in almost every state once you have employees. General liability is not typically required by law, but most commercial leases and some state licensing boards require it. Check state insurance requirements for your specific location.
How do I get a med spa insurance quote?
Contact an independent insurance broker who specializes in med spa coverage. They'll need information about your services, providers, revenue, location, and claims history. At Latent Insurance, we offer free consultations and quotes. Schedule a call to get started, or read our med spa insurance application guide to prepare.
Does my med spa need cyber insurance for HIPAA compliance?
HIPAA does not explicitly require cyber insurance, but it requires you to safeguard protected health information (PHI). If you experience a data breach, the costs of compliance (notification, investigation, potential fines) can be devastating without cyber coverage. HIPAA fines can reach over $2 million per violation category per year. Cyber insurance is the most cost-effective way to manage this risk.
Sources
Medical Spa Insurance: Key Coverages & Risk Gaps Explained - Novatae
Medical Spa Insurance Cost - Insureon
A Guide to Medical Spa Malpractice Insurance - Griffith E. Harris
What Type of Insurance Does My Med Spa Need? - Holt Law
State Insurance Laws: What Med Spas Must Know - Prospyr Med
HIPAA Enforcement Highlights - U.S. Department of Health & Human Services
EEOC Litigation Statistics - U.S. Equal Employment Opportunity Commission
Need med spa insurance? Get a free quote from Latent Insurance. We're an independent brokerage specializing in medical spa insurance and we shop across multiple carriers to build the right coverage program for your practice.
Last updated: February 27, 2026