Allied Health Practitioner — PI + Cyber

Physios, psychologists, dietitians and others — entity PI vs clinical PI, and what your data triggers.

Allied-health practitioners typically hold clinical-treatment PI via a medical-defence organisation (MAS, MPS). The commercial-PI we look at here covers the BUSINESS entity (the practice) for non-clinical claims plus cyber — patient health information is a regulated data class with strict notification rules under the Health Information Privacy Code and Privacy Act 2020.

Cover types most relevant

Professional indemnity

Professional indemnity covers your civil liability for claims arising from professional services. Every NZ retail PI wording is claims-made — the retroactive date and run-off availability decide whether old work is covered when you change insurers or close the business.
Cyber liability

Cyber liability covers both first-party costs (incident response, forensic, notification, business interruption, ransom) and third-party liability (privacy claims, regulator fines). NZ wordings differ on whether ransomware extortion payments are insurable and how Privacy Commissioner penalties interact with statutory liability.
Public liability

Public liability (sometimes "broadform" or "general liability") covers third-party bodily injury and property damage arising from your business activities. NZ commercial wordings vary materially on the products-liability bundle, the "occurrence" definition, contractual-liability extensions and the territorial limit.

Watch out for

treatment: Clinical-treatment claims are usually outside commercial PI — confirm your MAS/MPS membership before binding entity cover.
Health Information: Privacy breach involving patient data has a stricter notification regime than general business data (Health Information Privacy Code).

Allied Health Practitioner — PI + Cyber

Cover types most relevant

Watch out for

Related topics