ADHD Clinic Insurance Requirements UK: Complete Guide
Why has UK ADHD clinic insurance changed materially in 2026?
For a decade, private ADHD clinic insurance in the UK was largely a quiet corner of the medical indemnity market — generally settled, well-served by traditional medical defence organisations and a small group of mainstream commercial healthcare insurers, and rarely subject to underwriting reset. That position no longer holds in 2026, and the reasons are specific, documented, and concurrent.
The trigger is a four-strand convergence that has changed the risk profile of every UK private ADHD clinic. First, the Care Quality Commission (CQC) January 2025 inspection of Psychiatry-UK — the UK's largest private remote ADHD provider with over 90,000 patients aligned to its service — identified material governance and prescribing weaknesses, downgraded the service's rating, and triggered the provider's voluntary suspension of new Right to Choose referrals. Second, the BBC Panorama 2023 investigation of private online ADHD services raised durable public and regulator scrutiny of the clinical thresholds applied by remote-only providers. Third, the 2024–2025 collapse of GP willingness to enter Shared Care Agreements (SCAs) with private ADHD providers — with ADHD UK research indicating 50% of English GPs, 60% of Scottish GPs, and 70% of Welsh GPs unwilling to enter new SCAs — has transferred prescribing responsibility (and the long-tail liability that goes with it) back to the diagnosing clinic. Fourth, sustained demand growth has driven new entrants into the sector, many without the governance infrastructure that mature providers have built.
The downstream effect on UK ADHD clinic underwriting in 2026 has been: expanded CQC governance documentation expectations at proposal stage; heightened scrutiny of prescribing protocols, particularly for Schedule 2 controlled drugs (methylphenidate, lisdexamfetamine); explicit declaration of remote/in-person service mix and patient volumes; specific attention to shared care exit arrangements and patients orphaned by GP withdrawal; and substantially elevated cyber underwriting given the sensitivity of mental health records.
This guide is the definitive 2026 ADHD clinic insurance article — built around the post-2025 governance and shared-care-collapse risk landscape, the eight distinct claim-driving exposures, the cover architecture that responds, and the operational documentation that makes both regulatory compliance and claim defence possible. It complements our alternative therapies business insurance product page and sits within the wider alternative therapies cluster including IV drip therapy, oxygen therapy, red light therapy, cold plunge therapy, cryotherapy, and float therapy.
Key facts at a glance
- The CQC January 2025 inspection of Psychiatry-UK reset UK underwriting expectations — the largest private remote ADHD provider was rated requires improvement on multiple domains, with governance, prescribing oversight, and quarterly clinical audit identified as areas of pressure. The case is the working precedent for CQC scrutiny of remote ADHD services in 2026.
- UK GP shared care collapse has transferred prescribing liability back to private clinics — ADHD UK March 2024 research found roughly 50% of English GPs, 60% of Scottish GPs, and 70% of Welsh GPs unwilling to enter new Shared Care Agreements following private diagnosis. The clinic that diagnoses now often retains long-tail prescribing responsibility.
- ADHD medications are Schedule 2 Controlled Drugs under the Misuse of Drugs Regulations 2001 — methylphenidate, lisdexamfetamine, and dexamfetamine carry the highest prescribing, storage, and audit requirements. Prescribing breaches engage both criminal and regulatory exposure.
- Diagnostic error is the dominant PI claim category — claims typically allege that the clinic diagnosed ADHD on inadequate evidence, failed to consider differential diagnoses (autism, anxiety, mood disorders, trauma), or relied on remote-only assessment where in-person was clinically indicated. Claim values typically £30k–£120k; serious cases involving subsequent harm £80k–£300k+.
- Right to Choose has driven private ADHD volume but introduced contractual exposure — providers commissioned under NHS Right to Choose contracts face additional CQC scrutiny, NHS commissioner contract requirements, and shared care obligations that purely private operators do not. Cover must reflect both private and NHS-commissioned activity if both apply.
- UK ADHD clinic insurance premiums in 2026 typically run £4,500–£12,000 for solo prescribing clinicians and £25,000–£100,000+ for multi-clinician operations. Post-2025 underwriting has materially widened the spread between governance-mature and governance-weak operators.
- Insurance non-disclosure under the Insurance Act 2015 remains the most preventable catastrophe — operating outside declared scope (adding child patients without disclosure, expanding into Schedule 2 prescribing without disclosure, adding remote service without disclosure) leaves claims uninsured. Specific declaration at proposal is the only mitigation.
1. The 8 biggest ADHD clinic risks: summary table
The risks below are ranked by combined frequency, severity, and regulatory consequence under the post-2025 framework. Some — diagnostic error, shared care collapse — are everyday operational realities. Others — CQC enforcement, controlled drug breach — are infrequent but business-ending when they occur. The intelligent operator manages all eight simultaneously rather than addressing them in priority order. The risk pattern broadly parallels what we see in our sister IV drip therapy insurance guide for prescribing-led medical services, with the long-tail mental health dimension distinct to ADHD.
| Risk | Frequency | Severity | Primary Cover |
|---|---|---|---|
| Diagnostic error / misdiagnosis (PI) | Common — dominant PI claim | Medium-High (£30k–£120k typical) | Professional Indemnity / Medical Malpractice |
| Controlled drug prescribing exposure | Rare but consequential | High (£50k–£200k+; criminal exposure) | PI + Legal Expenses + D&O |
| Shared care collapse / continuity liability | Rising sharply 2024–2026 | Medium-High (£25k–£100k) | PI with extended continuity scope |
| Remote consultation governance failure | Rising | Medium-High (£40k–£150k) | PI with telemedicine scope |
| Cardiovascular monitoring failure | Occasional | High (£80k–£300k+) | PI / Medical Malpractice |
| Data breach / cyber on sensitive records | Rising materially | High (£50k–£500k+; UK GDPR) | Cyber insurance |
| CQC enforcement / regulatory action | Rising scrutiny per provider | High (defence costs £50k–£250k+) | Legal Expenses + D&O |
| Insurance non-disclosure (IA 2015) | Common (often unnoticed) | Catastrophic (uninsured loss) | None — proposal stage only |
2. How has CQC scrutiny of ADHD providers reshaped underwriting?
UK private ADHD clinics that diagnose, prescribe, or treat patients are required to register with the CQC under the Health and Social Care Act 2008 and are regulated by the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. Equivalent regulators apply in Scotland (Healthcare Improvement Scotland), Wales (Healthcare Inspectorate Wales), and Northern Ireland (RQIA). CQC registration is not optional; operating without it is a criminal offence, and any insurance claim arising from unregistered activity will not be paid.
What changed in 2025 was not the regulation itself but the visibility of inspection findings against major private ADHD providers — and the implications for underwriting. The Psychiatry-UK comprehensive inspection of January 2025 is the working precedent. The CQC's findings highlighted specific governance and prescribing oversight weaknesses, including limited audit of out-of-guideline prescribing, postal handling of controlled drug prescription slips without audit, and management capacity unable to keep pace with the scale of operations. The service voluntarily suspended new Right to Choose referrals while implementing remedial action. Insurance markets paid close attention.
The four distinct insurance exposure shifts that have followed:
Exposure shift 1: Governance documentation is now proposal-stage essential
Underwriters in 2026 expect proposal-stage evidence of: written clinical governance framework with senior responsible officer named; structured incident reporting system with documented learning loops; regular clinical supervision and peer review (typically monthly minimum); quarterly clinical record audit programme; safeguarding policies aligned to current CQC expectations; complaints handling with duty of candour evidence; mandatory training matrix per role with documented competency assessment; and policies addressing the specific issues highlighted in CQC reports (out-of-guideline prescribing, prescription handling, transitional care, risk assessment). Providers who can evidence these get competitive terms; providers who cannot face premium loadings or refusals.
Exposure shift 2: Prescribing pathway scrutiny has tightened
Controlled drug prescribing oversight is now a specific underwriting question rather than an assumed competency. Underwriters ask about: prescription generation and transmission process; controlled drug register maintenance; out-of-guideline prescribing rationale documentation; titration protocol adherence; physical health monitoring (blood pressure, heart rate, weight) at defined intervals; medication review frequency; and arrangements for prescribing when shared care is unavailable (which, in 2026, is most cases for private clinics).
Exposure shift 3: Remote service mix declaration is now material
Operators are now expected to declare specifically: percentage of consultations conducted remotely vs in-person; criteria triggering escalation from remote to in-person; technology platforms used and information governance arrangements; geographic spread of patients (cross-border consultation risk); home-office arrangements for clinicians (confidentiality, IG, professional environment); and arrangements for clinical emergencies during remote consultations. The Psychiatry-UK inspection specifically noted home-office working without standardised inspection arrangements as an area of scrutiny.
Exposure shift 4: Shared care collapse has expanded PI exposure period
Where GPs would historically take over prescribing 3–6 months post-diagnosis under SCAs, in 2026 many patients remain under specialist prescribing indefinitely. This extends the clinic's PI exposure period from a few months to potentially years per patient, materially increases the cumulative monitoring obligation, and creates explicit duty-of-care continuity requirements. Run-off PI cover and indemnity period selection have become significantly more important than in the pre-2024 environment.
3. Risk 1: Diagnostic error and misdiagnosis — the dominant PI exposure
Diagnostic Error and Misdiagnosis — The Dominant PI Claim
Diagnostic error is the most common PI claim category for UK private ADHD clinics in 2026. The typical claim alleges one or more of: ADHD diagnosed on inadequate evidence (insufficient developmental history, no third-party corroboration, single-session assessment); differential diagnoses not adequately considered (autism, generalised anxiety, depression, trauma response, bipolar spectrum, personality difficulties, substance use, thyroid dysfunction); diagnosis made by a clinician without appropriate specialist training; remote-only assessment where in-person was clinically indicated; or failure to revise diagnosis when subsequent presentation suggested alternative or co-occurring conditions. The downstream harm typically alleged: prescribed medication produced adverse effects without therapeutic benefit; underlying condition went untreated; patient self-perception harm from incorrect label; lost time and money on inappropriate treatment.
Structured assessment aligned to NICE NG87 (the UK national guideline on ADHD diagnosis and management); validated diagnostic instruments (DIVA-5, CAADID, ASRS, Conners with appropriate normative data) deployed per assessment; structured developmental history with third-party corroboration where possible; differential diagnosis explicit in every clinical record; assessing clinician specialist registered (GMC specialist register psychiatry or specialist trained paediatrician); minimum assessment duration aligned to complexity (typically 90–180 minutes for adult ADHD); documented decision rules on remote vs in-person assessment; re-assessment protocol where presentation changes; multidisciplinary discussion of complex cases.
Professional Indemnity / Medical Malpractice with specific ADHD diagnostic scope. Generic healthcare PI may not contemplate the post-2024 ADHD claim pattern specifically; specialist placement explicitly covers it. Limits typically £1m–£2m for solo prescribing clinicians; £5m–£10m for multi-clinician operations or those with NHS commissioning exposure. Claims-made basis is standard; run-off cover is essential because diagnostic error claims can surface 2–5+ years after the original assessment. The defence depends on documented assessment methodology, validated instruments deployed, and explicit differential diagnosis in records.
4. Risk 2: Controlled drug prescribing — Schedule 2 exposure
Controlled Drug Prescribing — The Schedule 2 Exposure
The first-line ADHD medications used in the UK — methylphenidate (Concerta, Ritalin, Equasym), lisdexamfetamine (Elvanse), and dexamfetamine — are Schedule 2 Controlled Drugs (CDs) under the Misuse of Drugs Regulations 2001. Schedule 2 brings specific prescribing, storage, audit, and reporting requirements that elevate compliance risk substantially above ordinary prescription medications. Breaches of CD regulations can engage criminal liability for the prescriber and the clinic, GMC regulatory action, CQC enforcement under Regulation 12 (safe care and treatment), and police investigation. The CQC inspection of Psychiatry-UK in January 2025 highlighted that prescription slips were stored at clinicians' home offices without audit and that the postal distribution system was not audited to ensure correct patient receipt — both areas of focus for underwriters in 2026.
CD register maintained per legislation with audit of entries; secure prescription generation and transmission process (electronic CD prescribing where available; secure courier or NHS-equivalent postal arrangements with audit of receipt); titration protocol aligned to NICE NG87 and BNF; out-of-guideline prescribing rationale documented in every relevant clinical record; physical health monitoring (BP, HR, weight) at defined intervals before, during titration, and at ongoing review; prescription of CDs only by clinicians with appropriate specialist competency; review meetings between prescribers to share learning on unusual prescribing; arrangements for managing patient diversion risk (CD misuse, requests for early prescriptions, lost prescription patterns); periodic audit programme on prescribing practices.
Professional Indemnity with explicit CD prescribing scope; Legal Expenses with CQC, GMC, and criminal investigation scope; Directors and Officers (D&O) liability for personal regulatory action against the registered manager or directors. Criminal fines are uninsurable under UK public policy, but defence costs are insurable and routinely £50,000–£250,000 for contested CQC enforcement or GMC fitness-to-practice proceedings. Specialist medical defence organisations remain the leading market for individual clinicians; specialist commercial healthcare brokers handle the corporate clinic placements.
5. Risk 3: Shared care collapse and continuity of care liability
Shared Care Collapse — The 2024–2026 Exposure Shift
NICE NG87 anticipates that after titration and dose stabilisation, ADHD medication prescribing and monitoring should be carried out under Shared Care Protocol arrangements with primary care. That assumed pathway has materially broken down. ADHD UK research from March 2024 indicated that approximately 50% of English GPs, 60% of Scottish GPs, and 70% of Welsh GPs were unwilling to enter new Shared Care Agreements following private ADHD diagnosis. Local Medical Committee collective action through 2024–2026 in several English regions has reinforced this position. The downstream effect on private ADHD clinics is profound: patients diagnosed and titrated typically remain under indefinite specialist prescribing rather than transitioning to GP-led management.
The insurance exposure shifts are: extended monitoring duty per patient (potentially years rather than months); cumulative caseload growth with each year of operation as patients accumulate; explicit continuity-of-care duty including managing patient distress when access to specialist appointments becomes constrained; and downstream PI exposure where patients allege that continuity of care failed during specialist-only prescribing.
Pre-treatment disclosure to patients about shared care realities in their region; written policy on continuity of care including arrangements when patient access to specialist appointments becomes constrained; documented annual review programme for all patients on ongoing prescriptions; physical health monitoring at defined intervals maintained throughout the specialist prescribing period; clear escalation pathway for safety concerns; documented arrangements for prescribing during clinician absence; transition planning for any patient whose clinical risk profile changes; periodic patient consent re-confirmation for ongoing specialist prescribing; transparent fee structure for ongoing prescribing communicated at outset.
Professional Indemnity with extended continuity-of-care scope. Limits and indemnity period selection materially affected — annual aggregate limits previously sized for assessment-led claims may be inadequate where patients remain under prescribing for years. Run-off PI cover at policy end is essential. The cover responds where ongoing duty of care has been met — meaning the documentation evidencing annual review, monitoring, and patient communication is the primary defence. The same documentation-as-defence principle applies across our specialist healthcare guides — see for example our professional indemnity insurance guidance for the underlying cover principles.
6. Risk 4: Remote consultation and telemedicine governance
Remote Consultation Governance — The Rising Exposure
Most UK private ADHD clinics operate at least partly remotely; many operate exclusively remotely. The model has expanded access materially but introduces specific governance risks. The CQC has been clear in its inspections — including Psychiatry-UK in January 2025 — that remote services face the same regulatory expectations as in-person services. The GMC's remote prescribing guidance similarly requires that prescribing decisions be supported by sufficient information; that the clinician verify identity; that there be arrangements for handing over care and managing emergencies; and that the environment be clinically appropriate. The 2026 claim pattern increasingly engages: identity verification failures (wrong patient, fraudulent identity); inadequate clinical environment for the patient (consultation conducted in inappropriate settings); inadequate clinician environment (home office without confidentiality assurance); failure to escalate from remote to in-person where clinically indicated; technology failure during sensitive disclosures; and cross-border consultations creating regulatory uncertainty.
Written remote consultation policy with explicit clinical indications for remote vs in-person; identity verification protocol (photo ID, address verification, second-factor); patient environment guidance (private space, no third parties unless agreed, no recording); clinician environment standards (home-office inspection protocol, IG standards, technology requirements); platform selection meeting NHS or equivalent data security standards; documented technology failure response; documented emergency response during remote consultation (crisis number, local emergency contact, geographic patient location known); clinical escalation pathway from remote to in-person; documented exclusion criteria where remote consultation should not proceed.
Professional Indemnity with explicit telemedicine and remote prescribing scope; specific declaration of remote-to-in-person ratio at proposal; Cyber insurance covering platform breach exposure. Generic medical indemnity may not contemplate cross-border or fully-remote operations specifically; specialist placement covers it. Where the clinic operates across UK jurisdictions, ensure cover is geographically valid across all (England, Scotland, Wales, Northern Ireland) — each has different regulators and the cover should respond accordingly.
7. Risk 5: Cardiovascular monitoring failure
Cardiovascular Monitoring Failure — The High-Severity PI Risk
ADHD stimulant medications can elevate blood pressure and heart rate. NICE NG87 and the BNF require physical health monitoring before initiation, during titration, and at defined intervals during ongoing treatment — blood pressure, heart rate, weight, and (for children) growth monitoring. Cardiac history must be specifically assessed before initiation, with referral to cardiology where indicated. The PI claim profile in 2026 includes claims arising from: failure to obtain baseline cardiovascular assessment before initiation; failure to identify cardiac contraindications (significant arrhythmia, structural heart disease, recent MI, uncontrolled hypertension); failure to monitor during titration; failure to act on monitoring data showing concerning trends; and cardiovascular events during treatment where retrospective review identifies inadequate monitoring. Remote consultation models face specific exposure because physical measurements require patient cooperation, equipment, and technique — often relying on patient-reported readings of variable reliability.
Pre-initiation cardiovascular history specifically documented (personal cardiac history, family history of sudden cardiac death, structural heart disease, arrhythmia); baseline BP and HR documented before initiation; protocol for cardiology referral where indicated (structural heart disease, family history of sudden cardiac death <40 years, syncope on exertion); monitoring schedule during titration with documented review of readings; ongoing review monitoring at defined intervals (typically annual minimum for stable adults; more frequent for children); written guidance to patients on self-monitoring; protocol for action on concerning readings (medication adjustment, escalation, cardiology referral); documented patient education on cardiovascular symptoms requiring urgent contact.
Professional Indemnity / Medical Malpractice responding to cardiovascular monitoring negligence claims. Claim values are high — £80k–£300k+ typical for serious cardiovascular events with adequate evidence of monitoring failure; severe outcomes (significant disability, fatality) can reach £500k–£1m+. The defence depends on documented baseline assessment, monitoring schedule adherence, and documented action on findings. Run-off cover is critical because cardiovascular event claims can surface years after the relevant prescribing decision.
8. ADHD clinic insurance cover checker
Select your business profile below to see the cover matched to your specific risk profile. For Miller & Partner's main alternative therapies product page see alternative therapies business insurance.
ADHD Clinic Insurance Cover Checker
Select your business profile to see the recommended insurance programme matched to the 8 main ADHD clinic risks
Solo Psychiatrist — Assessment Only (No Prescribing)
- ESSENTIAL Professional Indemnity / Medical Malpractice £1m–£2m with diagnostic scope
- ESSENTIAL Run-off PI cover — claims surface 2–5+ years after assessment
- ESSENTIAL Public Liability £2m–£5m for clinic premises (if any in-person work)
- ESSENTIAL Cyber insurance — mental health record sensitivity
- ESSENTIAL Legal Expenses with CQC and GMC scope
- RECOMMENDED CQC registration as Independent Doctor / clinic — declared correctly at proposal
- CONSIDER Personal Accident / Income Protection for sole practitioner
- CONSIDER Office Contents / Equipment cover for home-office or rented consulting room
Solo Psychiatrist — Assessment + Prescribing
- CRITICAL CD Schedule 2 prescribing must be specifically declared — generic medical indemnity may not contemplate it
- ESSENTIAL Professional Indemnity / Medical Malpractice £2m with diagnostic, prescribing, and continuity scope
- ESSENTIAL Run-off PI cover — extended period given shared care collapse
- ESSENTIAL Public Liability £5m
- ESSENTIAL Cyber insurance comprehensive — mental health record + prescribing data
- ESSENTIAL Legal Expenses with CQC, GMC, and CD investigation scope
- ESSENTIAL CQC registration with prescribing activity declared correctly
- RECOMMENDED Directors and Officers (D&O) if operating through a limited company
- CONSIDER Personal Accident / Income Protection
Small Clinic (2-5 Clinicians)
- LEGAL Employers' Liability £10m
- ESSENTIAL Professional Indemnity / Medical Malpractice £5m group cover with all clinicians named
- ESSENTIAL Public Liability £5m–£10m
- ESSENTIAL Cyber insurance comprehensive
- ESSENTIAL Legal Expenses with CQC, GMC, and CD investigation scope
- ESSENTIAL Office Contents and Equipment
- ESSENTIAL Business Interruption — key clinician absence and premises disruption
- ESSENTIAL Directors and Officers (D&O) liability for registered manager and directors
- ESSENTIAL Run-off PI cover — comprehensive given multi-clinician historic exposure
- RECOMMENDED Clinical trials / research cover if any study activity
Medium Clinic (6-15 Clinicians)
- CRITICAL Multi-clinician operations face cumulative historic exposure requiring comprehensive cover
- LEGAL Employers' Liability £10m
- ESSENTIAL Professional Indemnity / Medical Malpractice £5m–£10m
- ESSENTIAL Public Liability £10m
- ESSENTIAL Cyber insurance comprehensive — patient volume sensitivity
- ESSENTIAL Legal Expenses comprehensive scope
- ESSENTIAL Office Contents and Equipment across premises
- ESSENTIAL Business Interruption with key clinician dependency assessed
- ESSENTIAL Directors and Officers (D&O) liability comprehensive
- ESSENTIAL Run-off PI cover — material given accumulated historic exposure
- RECOMMENDED Clinical research / trials cover if applicable
Remote-Only ADHD Service
- CRITICAL Remote-only operation requires specific declaration; generic medical indemnity may not contemplate full-remote model
- LEGAL Employers' Liability £10m if any staff
- ESSENTIAL Professional Indemnity with explicit telemedicine, prescribing, and cross-UK-jurisdiction scope
- ESSENTIAL Cyber insurance comprehensive — platform breach, ransomware, data exfiltration
- ESSENTIAL Public Liability — even remote operations face occasional in-person interactions
- ESSENTIAL Legal Expenses with CQC, GMC, and ICO scope
- ESSENTIAL Run-off PI — particularly material for remote-only services given diagnostic scrutiny post-2025
- ESSENTIAL Directors and Officers (D&O) liability
- RECOMMENDED Clinician home-office inspection arrangements documented
Right to Choose / NHS Commissioned
- CRITICAL NHS commissioning contracts typically specify minimum cover terms — review carefully against required limits and scope
- LEGAL Employers' Liability £10m
- ESSENTIAL Professional Indemnity / Medical Malpractice £10m typically required by NHS contracting
- ESSENTIAL Public Liability £10m
- ESSENTIAL Cyber insurance comprehensive — NHS data sharing exposure
- ESSENTIAL Legal Expenses comprehensive — NHS contract dispute, CQC, GMC scope
- ESSENTIAL Business Interruption — NHS contract dependency assessment
- ESSENTIAL Directors and Officers (D&O) liability
- ESSENTIAL Run-off PI cover comprehensive
- ESSENTIAL Specific declaration of NHS commissioned vs private mix at proposal
9. CQC and governance readiness self-check
The Psychiatry-UK January 2025 inspection has reset the working benchmark for UK private ADHD clinic governance documentation. Tick each governance discipline your operation has in place. The unchecked items are your priority compliance and insurance gaps — and the items most likely to feature in any CQC re-inspection or insurance proposal review.
CQC & Governance Readiness Self-Check
Click each governance discipline you have in place. The more ticked, the lower your CQC and insurance exposure.
-
Written clinical governance framework with senior responsible officer named and documented accountability
-
NICE NG87-aligned diagnostic methodology with validated instruments (DIVA-5 or equivalent), structured developmental history, and explicit differential diagnosis recorded
-
Structured incident reporting system with documented learning loops and senior management review
-
Regular clinical supervision and peer review documented (monthly minimum for prescribing clinicians; quarterly for others)
-
Quarterly clinical record audit programme with sample of records reviewed against documented standards
-
Controlled drug register and prescribing audit covering Schedule 2 medications with documented out-of-guideline rationale where applicable
-
Cardiovascular monitoring protocol with baseline, titration, and ongoing intervals defined; documented action on concerning readings
-
Written remote consultation policy with criteria for remote vs in-person, identity verification, and emergency response
-
Home-office clinician environment standards with documented inspection arrangements and IG compliance evidence
-
Continuity-of-care policy for shared-care-orphaned patients — protocols for patients where GP shared care is unavailable
-
Mandatory training matrix per role with documented competency assessment and renewal dates
-
Information Commissioner's Office (ICO) registration and UK GDPR-compliant information governance arrangements documented
-
Insurance specifically declared for all activities — written broker confirmation that diagnostic, prescribing (including Schedule 2), remote, and any NHS commissioned activity is within cover scope
10. ADHD clinic operation risk assessor
Two factors drive ADHD clinic operational risk above all others: the activity scope (assessment-only vs assessment + prescribing; private-only vs NHS commissioned) and the maturity of governance documentation. Use the tool below for your specific risk profile.
ADHD Clinic Operation Risk Assessor
Select your activity scope and your governance maturity to see your specific risk profile and indicative insurance package
11. Risk 6: Data breach and cyber exposure on sensitive records
Cyber and Data Breach — The Rising Exposure on Mental Health Records
ADHD clinics hold particularly sensitive personal data: psychiatric assessments, detailed developmental and family history, prescribing records for Schedule 2 controlled drugs, identity documentation, and (for NHS commissioned services) data shared with NHS England. Under the Data Protection Act 2018 and UK GDPR, mental health data is Special Category personal data attracting the highest protections. ICO enforcement against healthcare data breaches in the UK has been substantial: fines for breaches involving health data have reached £6m+ in recent years, with notification and remediation costs frequently larger than the fine itself. Ransomware attacks targeting private healthcare have risen materially through 2024–2026, with several documented incidents involving private mental health providers.
ICO registration current with appropriate data protection officer arrangements; UK GDPR-compliant information governance framework documented; data flow mapping for all patient data including any cross-border transfers; data processing agreements with all suppliers (clinical platform, transcription services, billing); access control with multi-factor authentication for clinical systems; encryption at rest and in transit; backup and disaster recovery tested; incident response plan with documented notification procedures (72-hour ICO reporting requirement for personal data breaches); staff training on phishing, social engineering, and password hygiene; periodic penetration testing for clinics of meaningful scale; documented retention and deletion arrangements aligned to NHS standards.
Cyber insurance comprehensive scope including: first-party costs (incident response, forensic investigation, notification, credit monitoring, public relations), business interruption, ransomware extortion (subject to UK law), regulatory defence (ICO investigation), and third-party liability (claims from affected data subjects). Limits typically £500k for small clinics; £2m–£10m for larger operations with NHS contracting exposure. The cover responds where reasonable security measures were in place — making documentation evidencing those measures critical to claim defence. For broader cyber cover principles see our cyber insurance guide.
12. Risk 7: CQC enforcement and regulatory exposure
CQC Enforcement — The Regulatory Catastrophic Risk
CQC enforcement powers against ADHD providers (and other independent healthcare services) include: requirement notices requiring specific remedial action; warning notices with named breaches; conditions on registration restricting activity (which the Psychiatry-UK case made visible nationally); suspension of registration in serious cases; cancellation of registration ending the business; fixed-penalty notices and prosecutions for specific offences; and referral to the GMC, NMC, or other professional regulators for individual practitioner action. The Psychiatry-UK January 2025 inspection produced documented requirement notices in identified breach areas and voluntary suspension of new Right to Choose referrals during remedial action. Equivalent enforcement powers exist in Scotland (Healthcare Improvement Scotland), Wales (Healthcare Inspectorate Wales), and Northern Ireland (RQIA). Beyond CQC, individual clinicians face GMC fitness-to-practice proceedings with separate defence requirements.
CQC registration current with all regulated activities correctly declared (typically Treatment of Disease, Disorder or Injury under Schedule 1 of the 2014 Regulations); registered manager with appropriate qualifications and experience; statement of purpose accurately reflecting services delivered; preparation for periodic CQC inspection including mock inspection programme; documented response to any prior CQC findings; engagement with CQC notifications (deaths, serious injuries, allegations of abuse) within required timescales; complaints handling with duty of candour evidence; ongoing horizon scanning for CQC policy updates affecting independent providers; periodic external clinical governance review for clinics of meaningful scale.
Legal Expenses with comprehensive regulatory scope covering CQC investigation, enforcement action, and prosecution defence. Directors and Officers (D&O) liability for personal regulatory action against the registered manager or directors. Specialist medical defence organisation membership remains the standard route for GMC fitness-to-practice defence at clinician level. Defence costs for contested CQC enforcement routinely run £50,000–£250,000+; GMC fitness-to-practice defence typically £40,000–£150,000 per clinician for substantive contested cases. Fines and regulatory penalties are uninsurable but defence costs are insurable and should be specifically scoped at proposal.
13. Risk 8: Insurance non-disclosure under the Insurance Act 2015
Insurance Non-Disclosure — The Most Preventable Catastrophe
The most common reason UK insurance claims are reduced or declined isn't underwriting fraud or bad luck — it's non-disclosure at the proposal or renewal stage. ADHD clinics routinely buy medical indemnity or healthcare package policies without specifically declaring all material activities. Common non-disclosure patterns: ADHD prescribing not specifically declared when policy describes "general psychiatric practice"; Schedule 2 controlled drug prescribing not specifically declared; child and adolescent patients not specifically declared on a policy priced for adult-only practice; remote-only or remote-majority operation not specifically declared; NHS commissioned activity (Right to Choose) not specifically declared; multi-site operation not specifically declared. The Insurance Act 2015 requires "fair presentation of the risk" — proactively disclosing every material fact the insurer would want to know. Failure to do so allows the insurer to: avoid the policy (treating it as never having existed); reduce the claim proportionally; impose terms that would have applied with proper disclosure.
Annual review of declared activities against actual operations; written confirmation from broker that all current activities are within scope; specific declaration of each activity at proposal (assessment, prescribing including specific CD schedules, age groups treated, remote vs in-person mix, NHS commissioned activity, geographic spread, supervision arrangements); mid-term notifications to broker when new activities are added; documented response to broker enquiries at renewal; retention of policy documents and broker correspondence as evidence.
There is no insurance response to insurance non-disclosure — that's the whole point. The cover that should have responded doesn't. The only mitigation is at the proposal stage: detailed declaration, broker discipline, and renewal review. Specialist ADHD clinic broker placement makes a material difference here — generic brokers often miss the specific declarations that ADHD work requires, while specialist brokers know exactly what each insurer expects to see at proposal. For more on the broader principle see our business insurance quote guide.
14. What drives the cost of ADHD clinic insurance in 2026?
ADHD clinic insurance pricing in 2026 reflects the post-2025 governance and shared-care-collapse underwriting transformation. Indicative annual premium ranges:
| Business Profile | Indicative Annual Premium 2026 |
|---|---|
| Solo psychiatrist — assessment only, £80k–£200k turnover | £3,500–£7,500 |
| Solo psychiatrist — assessment + prescribing, £150k–£350k turnover | £4,500–£12,000 |
| Small clinic (2–5 clinicians), £400k–£900k turnover | £14,000–£32,000 |
| Medium clinic (6–15 clinicians), £1m–£3m turnover | £28,000–£75,000 |
| Remote-only ADHD service, £500k–£2m+ turnover | £18,000–£55,000 |
| Right to Choose / NHS commissioned + private, £1m–£5m+ turnover | £35,000–£100,000+ |
| Multi-site multi-discipline neurodivergent service, £3m–£10m+ turnover | £60,000–£200,000+ |
The factors below drive both insurance premium and overall risk management investment. The rating impact within each profile band is typically larger than the differential between profile bands — meaning a solo prescribing clinician with excellent governance can pay less than another with poor governance.
| Rating Factor | Impact on Premium | What You Can Do |
|---|---|---|
| Prescribing scope (assessment-only vs Schedule 2 prescribing) | Prescribing typically 60–100% premium uplift on PI | Declare accurately; cannot reduce the differential without changing service model |
| Patient age groups (adults only vs adults + children) | Child patients typically 30–50% premium uplift | Declare specifically; assess whether child practice is commercially essential |
| Governance documentation maturity | Mature CQC-aligned documentation reduces premium 15–25% across programme | Implement audit programme, peer review, structured governance — see self-check tool above |
| Annual patient volume and caseload | Primary scaling factors for PI, EL, Cyber | Declare accurately including planned growth and ongoing caseload accumulation |
| Remote vs in-person service mix | Remote-only typically 20–35% premium uplift on PI | Document remote consultation policy; declare specifically; consider in-person element for highest-risk cases |
| Clinician credentials | GMC specialist register registration is baseline; subspecialty training reduces premium 5–10% | Maintain at clinician level; evidence at every renewal |
| NHS commissioning exposure | Right to Choose / NHS contracting typically adds 25–40% to programme | Specific declaration; ensure contract minimum cover requirements met |
| Limits selected | £2m vs £5m vs £10m PI material; cyber limits material given mental health data sensitivity | Match to contract requirements and caseload exposure |
| Claims history | 5+ year impact; diagnostic error and prescribing claims particularly material | Root cause analysis and remedial documentation after any claim |
| Run-off cover scope | Comprehensive run-off adds 20–30% to PI line but essential for shared-care-collapse exposure | Plan for continuous run-off; budget at programme level |
| Broker placement | Specialist medical indemnity brokers access better terms than generic placement | Use a broker with specialist healthcare and alternative therapies underwriting experience |
| Continuity with insurer / MDO | 3+ years with same provider typically reduces renewal premium 5–10% | Strategic continuity decision; don't chase £500 savings |
15. Real claims and how to manage them
Claim — Diagnostic Error PI, £85,000 Settlement
A solo psychiatrist operating a remote-only ADHD service assessed a 32-year-old woman who self-presented citing concentration difficulties, restlessness, and emotional dysregulation. The assessment was conducted via a single 75-minute video consultation; the screening tools used were ASRS (self-report) and a brief developmental history questionnaire. No third-party corroboration was obtained; differential diagnosis was not explicitly recorded. ADHD was diagnosed and methylphenidate prescribed. The patient continued treatment for 14 months with limited improvement; subsequent NHS specialist re-assessment identified that the underlying condition was complex PTSD with co-occurring generalised anxiety, and that the original presentation had been entirely consistent with that diagnosis rather than ADHD.
The patient brought a PI claim alleging: inadequate assessment methodology (single session, no third-party corroboration, no in-person verification of key features); failure to consider differential diagnoses (no explicit consideration of trauma response or anxiety); failure to apply NICE NG87 methodology rigorously; inappropriate prescription of controlled drugs on inadequate evidence base; downstream harm from misdiagnosis (14 months of inappropriate treatment, delayed access to appropriate trauma-focused therapy, side effect burden).
The clinician's PI responded. Settlement: £85,000 (treatment costs to date, lost earnings during inadequate-treatment period, future therapy costs, general damages for diagnostic injury). Defence costs: £22,400. Total claim: £107,400.
Post-claim renewal: PI premium increased 45%. Insurer required: structured developmental history with third-party corroboration where possible; validated diagnostic instruments (DIVA-5 or equivalent) deployed at every assessment; explicit differential diagnosis recorded; minimum assessment duration of 90 minutes for adult ADHD; documented decision rules on remote vs in-person assessment; peer review of complex cases. The clinician implemented these and at the following renewal premium returned to a 20% loading over baseline.
The lesson: diagnostic error is the dominant PI claim category for UK private ADHD clinics in 2026. The documentation that defends these claims — structured methodology, validated instruments, explicit differential diagnosis — is the same documentation that prevents them. Remote-only services face heightened scrutiny; the post-2023 Panorama and post-2025 Psychiatry-UK landscape means tribunals and insurers expect clear evidence of robust assessment methodology.
Claim — Cardiovascular Monitoring Failure, £165,000 Settlement
A small remote ADHD clinic assessed and titrated a 47-year-old man on lisdexamfetamine over a 4-month period. Baseline blood pressure was recorded as 135/85 (mildly elevated); no cardiology referral was triggered. During titration, the patient reported palpitations during a brief follow-up; the clinician recorded the report but did not specifically re-measure BP/HR or escalate. At month 8 on a stable dose, the patient experienced a non-fatal myocardial infarction. Subsequent investigation identified that the patient had undiagnosed atrial fibrillation and untreated hypertension that had progressed during the period of stimulant treatment.
The patient brought a PI claim alleging: failure to identify baseline cardiac risk factors (the mildly elevated BP should have prompted closer inquiry); failure to obtain cardiology assessment given the borderline baseline; failure to act on the patient-reported palpitations during titration (should have triggered urgent BP/HR re-measurement and cardiology referral); inadequate ongoing monitoring during 8 months of treatment; cardiac event causation contested but not successfully refuted.
The clinic's PI responded. Settlement: £165,000 (medical costs, lost earnings during recovery, future medical care for cardiac condition, general damages, psychological injury). Defence costs: £38,500. Total claim: £203,500.
Post-claim renewal: PI premium increased 55%. Insurer required: structured cardiovascular screening protocol with explicit referral triggers; BP measurement at every titration and review visit (with documented patient self-measurement protocol for remote consultations); documented action protocol for patient-reported cardiac symptoms; cardiology referral pathway documented; periodic cardiac monitoring audit. The clinic implemented these and at the following renewal premium returned to a 28% loading over baseline.
The lesson: cardiovascular monitoring failure is the high-severity PI claim category for ADHD clinics. The documentation pack that defends these claims — baseline screening, monitoring schedule, documented action on findings — is the same pack that prevents them. Remote services face specific exposure because physical measurements rely on patient cooperation; the response is to make the monitoring protocol explicit and audit-trackable rather than implicit.
Claim — Cyber and Data Breach, £92,000 Combined
A medium-sized ADHD clinic operating across multiple UK regions suffered a ransomware attack via a phishing email opened by an administrative staff member. The attackers gained access to the clinical record system and exfiltrated patient data including assessment reports, prescribing records, identity documents, and correspondence covering approximately 4,800 patients. The attack was identified within 36 hours; backups allowed system restoration without paying the ransom. However, exfiltrated data was published on a darknet leak site approximately 6 days after the attack.
Costs incurred: incident response and forensic investigation £24,000; patient notification (postal and email to all 4,800 affected) £8,500; credit monitoring offer to affected patients £18,000; legal fees and ICO regulatory engagement £14,500; public relations and crisis management £7,000; system remediation including enhanced MFA, network segmentation, and staff training £11,000; ICO investigation engagement (no monetary penalty issued in this case given the clinic's documented prior security measures and prompt response). Total first-party costs: £83,000.
Subsequent third-party claims from affected patients alleging distress and personal data misuse exposure: 3 individual claims settled at £2,500–£4,500 each totalling £9,000. Total claim: £92,000.
The clinic's Cyber insurance responded comprehensively. Post-claim renewal: Cyber premium increased 60%; insurer required: documented MFA on all clinical and administrative systems; network segmentation between clinical and administrative environments; quarterly phishing simulation training; annual penetration testing; documented incident response plan with tabletop exercises. The clinic implemented these and at the following renewal premium returned to a 28% loading over baseline.
The lesson: cyber and data breach is the rising claim category for healthcare providers. Mental health data is Special Category personal data under UK GDPR and ICO scrutiny is heightened. The documented prior security measures — MFA where it was in place, monitoring that detected the incident within 36 hours, prompt ICO notification — were the difference between a contained incident and a regulatory penalty action. The cost was substantial but the operational continuity was preserved.
Claims Management Steps
How to respond to an ADHD clinic incident, claim, or regulatory engagement — the steps below are critical given the multi-policy and multi-regulator exposure typical of 2026 ADHD clinic operations:
- Prioritise patient safety first. Standard medical response. Where the incident involves clinical harm, ensure appropriate medical care is in place before any administrative response begins. For mental health crises, follow standard crisis protocols.
- Notify your insurer / MDO immediately for any potential claim. ADHD clinic incidents often engage multiple policies (PI/MDO, EL, PL, Cyber, Legal Expenses, D&O). Single notification triggers coordinated response. Threshold is "may give rise to a claim" — much lower than "formal claim received".
- Preserve all documentation rigorously. Clinical records; assessment instruments deployed; signed consent forms; prescribing records and CD register entries; physical monitoring records; communications with patient; supervision and peer review notes; staff training records. The documentation pack is the defence across all coverage layers.
- Do not admit liability or fault. Provide factual information about what happened, what protocol was followed, what evidence was available at the time. Do not accept fault or apologise in writing in a way that could be interpreted as admission. The duty of candour applies but is distinct from liability admission and should be discharged with appropriate legal support.
- Manage CQC / GMC / ICO engagement carefully. If regulators attend or notify, engage your Legal Expenses insurer or MDO immediately. Cooperate factually with inspectors but do not provide written statements without legal representation. Regulatory investigation can become criminal prosecution for controlled drug breaches.
- Notify CQC under regulatory reporting duties. Under the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, certain incidents are notifiable to CQC within specified timeframes including deaths, serious injuries, and allegations of abuse. ICO notification is required within 72 hours for personal data breaches.
- Conduct root cause analysis and document remedial action. Identify underlying cause and implement remedial action. Insurers reviewing renewal will ask what's changed since claim; regulators will require evidence of remedial action; the duty of candour requires honest disclosure to affected patients.
- Update operational documentation to address gap. Where the claim identified a documentation gap (no audit of prescribing, no peer review record, no monitoring schedule, no cyber security measure), update the standard operating procedure to close the gap going forward. This is both insurance and regulatory defence.
Glossary of ADHD clinic insurance terms
- CQC (Care Quality Commission)
- The independent regulator of health and social care in England. Private ADHD clinics that diagnose, prescribe, or treat patients are required to register with the CQC and operate within the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. Equivalent regulators apply in Scotland (Healthcare Improvement Scotland), Wales (Healthcare Inspectorate Wales), and Northern Ireland (RQIA).
- NICE NG87
- The National Institute for Health and Care Excellence (NICE) guideline on ADHD diagnosis and management. The working UK national guideline that defines expected assessment methodology, treatment pathways, monitoring requirements, and shared care principles. PI claim defence routinely depends on documented adherence to NG87.
- Shared Care Agreement (SCA)
- A formal arrangement between a patient, their GP, and their specialist clinician under which the GP takes over routine prescribing while the specialist retains oversight responsibility. NICE NG87 anticipates SCAs after titration and stabilisation. The 2024–2026 collapse in GP willingness to enter SCAs has materially extended specialist prescribing responsibility for private ADHD clinics.
- Right to Choose
- NHS Patient Choice regulations in England that enable patients to opt for a specific service or provider once referred by a GP or other NHS professional. Many private ADHD clinics now hold Right to Choose contracts with NHS Integrated Care Boards, expanding access but introducing NHS commissioning obligations.
- Schedule 2 Controlled Drug
- The most strictly controlled classification of prescription medication under the Misuse of Drugs Regulations 2001. ADHD stimulants including methylphenidate, lisdexamfetamine, and dexamfetamine are Schedule 2. Brings specific prescribing, storage, audit, and reporting requirements.
- Professional Indemnity (PI) / Medical Malpractice
- Specialist insurance covering claims of professional negligence in clinical practice. For ADHD clinics, the dominant claim categories are diagnostic error, prescribing negligence, monitoring failure, and continuity of care failure. Typically operates on a claims-made basis, requiring run-off cover at policy end.
- Run-off Cover
- Professional Indemnity cover that continues to respond to claims notified after the policy has ended (provided the work was performed during the original policy period). Essential for ADHD clinics because diagnostic error and cardiovascular event claims can surface 2–5+ years after the original engagement.
- GMC (General Medical Council)
- The professional regulator of doctors in the UK. GMC registration with appropriate specialist competencies is a baseline requirement for ADHD clinicians who diagnose or prescribe. GMC fitness-to-practice proceedings are separate from CQC enforcement and require separate defence arrangements (typically through medical defence organisation membership).
- MDO (Medical Defence Organisation)
- Membership organisations providing professional indemnity and regulatory defence services to individual clinicians — Medical Protection Society (MPS), Medical Defence Union (MDU), and the Medical and Dental Defence Union of Scotland (MDDUS). Distinct from commercial insurance and not regulated by the FCA; offers occurrence-based cover for individual practitioners.
- Duty of Candour
- The statutory duty under Regulation 20 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requiring providers to be open and transparent with patients (or relevant persons) about notifiable safety incidents. Distinct from liability admission but engaged whenever a patient has suffered harm.
- UK GDPR / DPA 2018
- The UK General Data Protection Regulation and the Data Protection Act 2018. Mental health data is Special Category personal data attracting the highest protections. Breaches must be notified to the ICO within 72 hours; fines can reach £17.5m or 4% of global turnover under the most serious sanctions.
- Information Commissioner's Office (ICO)
- The UK regulator for data protection. ADHD clinics must register with the ICO and comply with UK GDPR. ICO enforcement against healthcare data breaches has been substantial through 2024–2026, with mental health providers facing specific scrutiny given data sensitivity.
- DIVA-5
- The Diagnostic Interview for ADHD in Adults, version 5. A structured diagnostic interview widely used in UK adult ADHD assessment. Validated and aligned to DSM-5 / ICD-11 diagnostic criteria. Documented use in assessment supports PI claim defence on diagnostic methodology.
- ASRS (Adult ADHD Self-Report Scale)
- A screening instrument developed by the World Health Organization for adult ADHD. Used as a screening tool rather than diagnostic — diagnosis requires structured clinical interview and broader assessment.
- Directors and Officers (D&O) Liability
- Insurance covering personal liability of directors and officers for decisions made in their corporate role. For ADHD clinics, material because the registered manager and directors can face personal CQC enforcement action and personal liability under company law.
- Legal Expenses Insurance
- Insurance covering legal costs for regulatory investigations, criminal prosecutions, employment tribunals, and contract disputes. For ADHD clinics, the working scope includes CQC investigation, GMC fitness-to-practice, ICO investigation, and controlled drug prosecution. Fines and penalties are uninsurable; defence costs are insurable.
Frequently asked questions
ADHD clinic insurance is specialist commercial insurance designed for private ADHD diagnostic, prescribing, and treatment services. The core covers in 2026 are: Professional Indemnity / Medical Malpractice with diagnostic, prescribing, and continuity-of-care scope; Employers' Liability (if staff); Public Liability for clinic premises; Cyber insurance for sensitive mental health records; Legal Expenses with CQC, GMC, and ICO investigation scope; Directors and Officers (D&O) liability for registered managers and directors. The cover differs fundamentally from generic medical indemnity in its scope for ADHD-specific exposures including Schedule 2 controlled drug prescribing, remote consultation governance, and shared-care-collapse continuity obligations.
The CQC's January 2025 comprehensive inspection of Psychiatry-UK — the UK's largest private remote ADHD provider with over 90,000 patients aligned to its service — identified governance and prescribing oversight weaknesses including limited audit of out-of-guideline prescribing, postal handling of controlled drug prescriptions without audit, and management capacity unable to keep pace with operational scale. The service voluntarily suspended new Right to Choose referrals during remedial action. Insurance markets responded by raising proposal-stage governance documentation expectations across the sector: written clinical governance framework, structured peer review, quarterly clinical audit, CD prescribing audit, and remote consultation governance are now working underwriting baselines. Providers who can evidence these get competitive cover; providers who cannot find premium loadings or refusals.
Indicative 2026 annual premiums: solo psychiatrist assessment-only £3,500–£7,500; solo psychiatrist assessment + prescribing £4,500–£12,000; small clinic (2-5 clinicians) £14,000–£32,000; medium clinic (6-15 clinicians) £28,000–£75,000; remote-only ADHD service £18,000–£55,000; Right to Choose / NHS commissioned £35,000–£100,000+; multi-site multi-discipline £60,000–£200,000+. Pricing depends on prescribing scope, patient age groups, governance maturity, claims history, limits selected, and broker placement type. Post-2025 underwriting has materially widened the spread between governance-mature and governance-weak operators. See our IV drip therapy insurance guide for similar prescribing-led healthcare pricing principles.
CQC registration is a legal requirement for any provider undertaking regulated activities (diagnosis, treatment, prescribing) and registration requires evidence of adequate insurance. Employers' Liability is legally required if you have staff under the Employers' Liability (Compulsory Insurance) Act 1969. Professional Indemnity / Medical Malpractice is required by GMC fitness to practice rules — practising without adequate cover is itself a fitness-to-practice issue. ICO registration is required by data protection law. Public Liability is not legally required but is contractually required by most premises and NHS commissioning. Other covers (Cyber, Legal Expenses, D&O) are commercially essential but not legally required.
MDOs (Medical Protection Society, Medical Defence Union, MDDUS in Scotland) provide professional indemnity cover and regulatory defence support primarily to individual clinicians on a membership basis. They typically offer occurrence-based cover (responding to incidents during the membership period regardless of when claims are made) and are not regulated by the FCA. Commercial medical indemnity insurance from regulated insurers offers claims-made cover (responding to claims made during the policy period) and applies particularly well to corporate clinic structures and group cover for multiple clinicians. Many ADHD clinics use a combination: MDO for individual clinicians, commercial cover for the clinic corporate entity. Decisions on the right combination depend on clinic structure, employment arrangements, and risk profile.
Only if specifically scoped. Generic medical indemnity may respond to prescribing negligence claims but may not contemplate the specific Schedule 2 controlled drug exposure. Specialist ADHD clinic PI should explicitly cover: prescribing of methylphenidate, lisdexamfetamine, dexamfetamine; CD register and prescription handling; out-of-guideline prescribing; and patient diversion exposure. Legal Expenses cover should explicitly include CD investigation by police or HSE. Get written broker confirmation that Schedule 2 prescribing is within scope. The premium uplift for explicit scope is typically modest; the claim exposure without it is potentially £50k–£200k+ per claim plus criminal defence costs.
Shared care collapse — the 2024–2026 widespread GP refusal to enter Shared Care Agreements following private ADHD diagnosis — has materially extended specialist prescribing responsibility per patient. Where the working assumption was 3-6 month specialist prescribing handed over to GP under SCA, patients now often remain under indefinite specialist prescribing. This affects PI in three ways: extended monitoring duty per patient; cumulative caseload growth with each year of operation; and explicit continuity-of-care duty including managing patient distress when specialist access becomes constrained. Cover should be reviewed: PI limits and aggregate may be inadequate; run-off cover scope becomes more important; documented continuity-of-care policy becomes both regulatory and insurance defence.
Insurance non-disclosure under the Insurance Act 2015. The pattern: clinic buys medical indemnity describing itself as "psychiatric practice" or "mental health clinic", undertakes ADHD assessment and Schedule 2 prescribing as a substantial part of the work, doesn't specifically declare it. At claim stage, the insurer points to the proposal documentation and questions whether the ADHD-specific exposures were within cover scope. Same pattern for: child patients on a policy priced for adult-only practice; remote-only operation on a policy priced for in-person practice; NHS commissioned activity not declared. Not fraud; normal operation of UK insurance law requiring fair presentation of risk. The fix at proposal stage is minimal cost; the retrospective cost is potentially every uninsured claim across multiple policy years.
The single biggest premium reduction lever is documented CQC-aligned governance: written clinical governance framework, structured peer review, quarterly clinical audit programme, CD prescribing audit, cardiovascular monitoring protocol, remote consultation policy, continuity-of-care policy. Mature documentation typically reduces premium 15–25% across the programme. Other levers: specialist register registration evidenced; accurate activity declaration; limits matched to actual contract requirements; 3+ years continuity with same insurer / MDO; annual payment vs monthly; specialist broker placement. Stack the levers; don't choose between them. Avoid the trap of buying the cheapest generic medical indemnity — the saving is dwarfed by uninsured claim exposure under the post-2025 framework.
Yes for any provider undertaking regulated activities in England — which includes ADHD diagnosis, treatment of mental health disorders, and prescribing of medication. Equivalent regulator registration applies in Scotland (Healthcare Improvement Scotland), Wales (Healthcare Inspectorate Wales), and Northern Ireland (RQIA). Operating regulated activities without registration is a criminal offence. CQC registration requires: nominated individual; registered manager with appropriate qualifications and experience; statement of purpose; evidence of policies and procedures; insurance cover evidence. Any insurance claim arising from unregistered activity will not be paid. Plan for 8–16 weeks from application to registration in current CQC processing timescales.
NHS commissioning contracts typically specify minimum cover terms aligned to the public-facing exposure of NHS-funded services. Typical specifications: Professional Indemnity / Medical Malpractice £10m; Public Liability £10m; Employers' Liability £10m; Cyber insurance comprehensive (NHS data sharing exposure); Legal Expenses comprehensive. Beyond insurance specifically, NHS commissioners require: CQC registration current and rated at least Good (Requires Improvement triggers commissioner review); information governance toolkit completion or NHS Data Security and Protection Toolkit compliance; specific contract performance reporting; clinical governance demonstrated. The cover specifications are typically minimums; commercial wisdom is to exceed them given the heightened scrutiny applied to NHS contractor performance. For NHS contracting principles see our professional indemnity insurance guide.
Look for brokers with specific experience in private healthcare, mental health services, and ADHD clinic risk evidenced by: specialist articles or guides on ADHD clinic insurance and post-2025 cover scope; willingness to discuss specific exposures (diagnostic error, Schedule 2 prescribing, shared care collapse, remote consultation, CQC governance) in detail; access to Lloyd's market and specialist healthcare insurers rather than just mainstream commercial markets; FCA authorisation and documented track record; understanding of MDO vs commercial indemnity trade-offs. Avoid brokers offering "healthcare package" without discussing ADHD specifics; brokers who can only quote one or two markets; brokers who don't ask about prescribing scope, age groups, remote service mix, and NHS commissioning at proposal. Miller & Partner specialise in this sector — see our alternative therapies main product page and broader alternative therapies insights hub.
Instagram
LinkedIn