Is Your MedSpa Actually Covered? 10 Insurance Gaps South Florida Owners Miss

Your MedSpa can have a certificate of insurance, a physician medical director, and a business policy—and still have serious coverage gaps.

The problem is rarely that an owner bought no insurance. The problem is that the policies may not connect. The physician assumes the business policy protects the medical director. The owner assumes every injector is covered. The injector assumes the physician’s malpractice policy extends to the whole team. Meanwhile, a general liability policy may exclude professional services, and a professional liability policy may not name the correct business entity.

That confusion is especially dangerous in South Florida, where aesthetic practices often combine medical services, retail products, independent contractors, multiple locations, expensive devices, online scheduling, patient photography, and aggressive social-media marketing.

Why one MedSpa policy is rarely enough

A MedSpa operates at the intersection of healthcare and business. A patient may allege professional negligence after an injection. A customer may slip in the reception area. A product may cause an adverse reaction. A hacker may steal patient photographs and payment information. An employee may allege harassment or retaliation. A laser may be damaged by an electrical event.

Those incidents do not necessarily belong under the same policy. Depending on the practice, protection may involve medical professional liability, entity professional liability, general liability, products liability, property, equipment breakdown, cyber, workers’ compensation, and employment-practices coverage.

The objective is not to accumulate policies. It is to determine which policy is intended to respond to each meaningful exposure and whether the people, entities, services, and locations are correctly described.

Gap 1: The physician is insured, but the MedSpa entity is not

A physician’s individual malpractice policy may protect the physician for covered professional services. That does not automatically mean the limited liability company, professional association, management company, trade name, or other operating entity is insured.

A claim can name everyone: the treating provider, supervising physician, medical director, MedSpa, property owner, and management company. Review the declarations and endorsements to confirm which legal entities are named insureds and whether entity professional liability is included.

Do not rely on the name displayed on the storefront or website. Insurance applications and policies need the correct legal names, ownership interests, and relationships.

Gap 2: The injector is not covered in the role you assumed

Coverage may depend on the injector’s professional license, employee or independent-contractor status, scope of duties, supervision, locations, and treatments performed. A policy that covers employed nurses may not automatically cover contractors. A policy listing one provider class may not include another.

Ask direct questions:

• Is the injector individually named or included as a covered provider class?
• Does coverage apply to employees, contractors, or both?
• Are the injector’s actual treatments covered?
• Are mobile services and every practice location included?
• Does the contractor need separate individual coverage?
• Does the contract require limits or additional-insured status?

Gap 3: The medical director’s policy excludes or limits the arrangement

A medical director can be named in allegations involving protocols, delegation, supervision, patient selection, credentialing, product sourcing, or failure to respond appropriately to a complication—even when the physician did not personally perform the treatment.

The medical-director agreement and insurance program should be reviewed together. Confirm whether the physician’s policy covers medical-director activities, whether the MedSpa’s policy protects the physician, and how indemnification provisions allocate responsibility.

Florida’s supervision requirements can vary based on the professional licenses, services, location, and operational structure. For example, Florida Statute 458.348 contains specific standards for certain physician-supervised offices providing primarily dermatologic or aesthetic skin-care services. That is a legal and operational issue—not something an insurance policy fixes. Have qualified Florida healthcare counsel evaluate the arrangement.

Gap 4: General liability is mistaken for malpractice insurance

General liability commonly addresses allegations such as a customer slipping on a wet floor or the business damaging rented property. It may exclude bodily injury arising from professional healthcare or aesthetic services.

Medical professional liability is designed around allegations involving covered professional services. It may not cover ordinary premises incidents, employment disputes, cyber events, or damage to the practice’s equipment.

Neither policy should be treated as a universal solution. Review how each one defines professional services and where exclusions create boundaries.

Gap 5: A treatment was added but never reported

MedSpas evolve quickly. A practice may add a laser, weight-management program, IV service, microneedling, radiofrequency treatment, body-contouring device, new injectable, or mobile service after the policy begins.

The new service may fall outside the application on which the carrier based its decision. Before offering it, ask whether the policy covers the procedure, provider, device, product, location, and any required supervision. Obtain written confirmation or an endorsement when needed.

Marketing a service does not prove it is insured. Purchasing a device does not prove its procedures are included.

Gap 6: Product liability is missing or too narrow

MedSpas may inject, apply, prescribe, distribute, or sell products. The exposure can include neurotoxins, dermal fillers, compounded products, skincare lines, supplements, weight-management products, and private-label goods.

Professional liability and products liability can overlap, but they are not identical. Determine how the policies address products used during treatment versus products sold to customers. Disclose private-label manufacturing, importing, repackaging, online sales, and off-label uses accurately.

The FDA advises patients to use licensed healthcare providers experienced with dermal fillers and warns that unintended injection into a blood vessel can cause severe complications, including tissue necrosis, vision abnormalities, blindness, or stroke. The FDA also warns against purchasing fillers sold directly to the public and against needle-free filler-injection devices. These risks make provider training, product sourcing, patient consent, complication protocols, and accurate insurance disclosure more than paperwork.

Gap 7: Off-label use is assumed to be covered

“A physician can use it off label” and “the insurance policy covers that use” are separate questions. A policy may restrict specific products, treatments, body areas, uses, or provider classes even when a clinician believes the treatment is medically appropriate.

Do not describe all injectables or aesthetic procedures as one generic category. Give the carrier an accurate list of products, procedures, anatomical treatment areas, annual volume, provider types, and protocols. If a use is important to the practice, request written confirmation that the policy does not exclude it.

Gap 8: Patient data and photographs are left to a basic business policy

MedSpas can hold medical histories, identification data, payment information, before-and-after photographs, consent forms, prescription information, and marketing permissions. A ransomware event or vendor breach can create notification, forensic, legal, restoration, reputational, and interruption expenses.

A basic business policy may offer little or no meaningful cyber protection. A cyber review should consider:

• Electronic health records and scheduling platforms
• Patient photographs and cloud storage
• Payment processors and online deposits
• Email, text-message, and social-media accounts
• Third-party technology vendors
• Ransomware and business interruption
• Privacy notification and incident-response services

Gap 9: Expensive devices are insured incorrectly

Lasers and aesthetic devices can be leased, financed, rented, or owned. The property policy should reflect the correct value, location, ownership, and loss-payee requirements. Standard property coverage may not address every mechanical, electrical, calibration, or internal-breakdown event.

Review replacement cost, equipment breakdown, transit, off-premises use, spoilage or temperature-sensitive products, business income, and how long replacement parts or specialized repairs might interrupt operations.

Gap 10: Employment and contractor classifications do not match reality

Calling someone an independent contractor does not settle the legal, tax, workers’ compensation, or insurance analysis. Misclassification can affect payroll, premium, coverage, contracts, and responsibility after an injury or allegation.

MedSpa owners should review workers’ compensation requirements, employment-practices exposure, provider contracts, certificates, additional-insured requests, and indemnification language with appropriate insurance, legal, and tax professionals.

Coverage for employees injured at work is different from coverage for allegations of discrimination, harassment, retaliation, or wrongful termination. These exposures may require separate policies.

A practical MedSpa insurance checklist

Before renewing or changing coverage, assemble the following:

• Legal names and ownership percentages for every entity
• DBAs, websites, and all operating locations
• Roster of physicians, medical directors, APRNs, PAs, RNs, aestheticians, laser technicians, employees, and contractors
• License type and employment status for every clinical provider
• Complete treatment list with annual volume by provider
• Medical-director, supervision, and contractor agreements
• Product list, sourcing information, and private-label activity
• Device schedule with values, ownership, and locations
• Five years of claims and incident history, where requested
• Current policies, declarations, endorsements, and exclusions
• Patient-data systems, payment platforms, and major technology vendors
• Payroll and worker classifications

This information helps an agent and underwriter evaluate the practice that exists—not a simplified version that may leave the wrong people or services outside the policy.

What should a South Florida MedSpa do next?

Start with a coverage map. List every person, entity, service, product, location, device, contract, and data system. Then identify which policy is intended to respond to each exposure. Any unanswered question becomes a carrier-confirmation item—not an assumption.

For a complete overview, visit the MedSpa and Aesthetic Practice Insurance in South Florida page. Physicians and medical directors can also complete the underwriting assessment to organize factors that may influence professional-liability eligibility and pricing.

This article provides general insurance education and is not legal, medical, tax, regulatory, or scope-of-practice advice. Insurance availability, eligibility, pricing, terms, and conditions are subject to carrier underwriting and applicable law. Nothing in this article binds coverage or guarantees a quotation or placement. Consult qualified Florida healthcare counsel regarding ownership, supervision, delegation, licensure, and scope-of-practice requirements.