Home Health Agency Insurance: Coverage & Requirements

Home health agencies face a unique combination of risks that require specialized insurance coverage. Your employees provide direct patient care — including wound care, medication management, physical therapy, and personal care — in patients' homes where you have limited control over the environment.

The healthcare context adds layers of regulatory risk. HIPAA governs how you handle patient health information. Medicare and Medicaid have specific conditions of participation. State licensing boards set staffing and training requirements. Failure to comply can trigger fines, loss of certification, and civil liability.

Adding to the complexity, home health agencies must manage risks from employees driving to patient homes, working unsupervised in private settings, and providing intimate personal care. This risk profile requires a broader insurance program than most service businesses.

Professional liability (malpractice) is the most critical coverage for home health agencies. It covers claims arising from the professional healthcare services your staff provides.

Common professional liability claims

• •Patient falls during assisted transfers or ambulation
• •Medication administration errors — wrong dose, wrong medication, missed doses
• •Failure to recognize and report changes in patient condition
• •Wound care errors leading to infection or delayed healing
• •Inadequate supervision of home health aides

GL covers non-professional third-party injury and property damage claims. For home health agencies, this includes:

• •A visitor to your office slips and falls
• •A caregiver accidentally damages furniture or property in a patient's home
• •Advertising injury claims (libel, slander)

GL typically costs $800-$2,500/year with standard $1M/$2M limits. Note that GL covers different claims than professional liability — you need both.

Home health agencies collect protected health information (PHI) on every patient — names, Social Security numbers, diagnoses, medications, treatment notes. This data is governed by HIPAA, and a breach can trigger severe penalties.

What cyber liability covers

• •Breach notification costs (required by law for all affected individuals)
• •Credit monitoring and identity theft protection for affected patients
• •Legal defense against HIPAA enforcement actions
• •Regulatory fines and penalties (where insurable)
• •Data recovery and forensic investigation costs

Cyber liability typically costs $1,000-$3,000/year for a small home health agency. Given the average cost of a healthcare data breach exceeds $10 million (IBM 2024 report), this is essential coverage.

Standard GL policies typically exclude abuse and molestation claims. Home health agencies need this coverage because caregivers provide intimate personal care (bathing, dressing, toileting) in private settings with vulnerable patients. Even unfounded allegations require legal defense that can cost $50,000-$200,000+.

This coverage typically costs $500-$2,000/year and covers legal defense costs, settlements, and judgments related to allegations of abuse, molestation, or exploitation of patients.

Workers' compensation

Home health workers face risks including back injuries from patient lifting, needlestick injuries, exposure to infectious diseases, slips and falls in unfamiliar home environments, and workplace violence. Workers' comp rates for home health aides typically run $2-$5 per $100 of payroll.

Commercial auto

Home visits are the business model, so driving risk is inherent. If your agency provides company vehicles, you need commercial auto insurance ($1,200-$3,000/year per vehicle). If staff use personal vehicles, you need hired and non-owned auto (HNOA) coverage ($200-$500/year) at minimum. Personal auto policies exclude business use.

Home health agencies must meet state and federal requirements that directly affect insurance needs:

• •State licensure: Required in most states. Typically requires proof of professional liability and GL insurance.
• •Medicare certification: Required to bill Medicare. Must meet Conditions of Participation (CoPs) and pass an initial survey.
• •HIPAA compliance: Required for all entities that handle PHI. See our HIPAA compliance guide for full requirements.
• •Background checks: Required for all staff in most states.
• •Ongoing quality reporting: Medicare requires OASIS assessments and quality data submission.