The Essentials: Protect Your Practice — Chiropractic Practice

How much malpractice insurance do chiropractors need?

Most carriers write chiropractic professional liability with limits of $1 million per claim and $3 million aggregate, and annual premiums commonly run from roughly $1,000 to $5,000 depending on state, claims history, and services. NCMIC, CNA, and ProAssurance are among the carriers that write chiropractic. Confirm whether the policy is claims-made or occurrence, since claims-made policies need tail coverage if you switch carriers or close the practice. Check that every technique, such as instrument-assisted adjustment, spinal decompression, dry needling where legal, and any supplements sold, is covered. Add general liability, property coverage, cyber liability, and workers' compensation as you hire.

What does HIPAA compliance actually require?

As a covered entity, you must complete a security risk analysis, adopt written privacy and security policies, sign Business Associate Agreements with vendors that touch patient data, train staff, and have a breach response plan. HHS's Office for Civil Rights enforces the rules, and breaches affecting 500 or more people must be reported to HHS and, generally, affected individuals within 60 days. Most small-practice failures are ordinary: unencrypted email, a screen visible in the waiting room, lost laptops, unlocked file cabinets, and texting patient details. Use an EHR with audit logs, encrypt devices, require strong passwords and two-factor authentication, and document every training.

How do you write notes that survive an audit?

Payers challenge medical necessity, treatment frequency, and maintenance care. Your SOAP notes should record the patient's complaint, objective findings, diagnosis, treatment performed, and response, and they should show functional goals and progress. Avoid copy-and-paste notes that look identical across visits. Code accurately: CMT codes 98940-98942 depend on the number of spinal regions treated, and evaluation and management codes need separate documentation to bill. Complete notes the same day, keep re-evaluations at set intervals, and record when you discharge or transition a patient to maintenance.

What are Medicare's chiropractic rules?

Medicare Part B covers manual manipulation of the spine to correct subluxation, billed with CMT codes and the AT modifier for active treatment, but it does not cover maintenance care, and it generally does not pay for exams, X-rays, or therapies ordered by a chiropractor. Documentation must show a diagnosis, a treatment plan with measurable goals, and the PART findings: pain, asymmetry, range of motion, and tissue changes. If you provide care Medicare may not cover, use an Advance Beneficiary Notice before treating. Medicare contractors run reviews on chiropractic claims, so consider an annual internal chart audit.

What consent and incident processes should you have?

Use a written informed consent that explains the nature of treatment, known risks, and alternatives, signed at the first visit and refreshed when treatment changes. Some states require specific wording. If a patient reports an adverse reaction, document facts, provide appropriate care or referral, and notify your carrier promptly, since delay can jeopardize coverage. Have a written complaint process and a plan for subpoenas and records requests.

What renewals and policy reviews should you track?

Track your state license and continuing education, DEA registration if applicable, X-ray registration, NPI and CAQH attestations (typically every 120 days), payer credentialing, malpractice renewal, and business licenses. Review coverage annually as you add equipment, associates, or new services, since limits set at opening may not fit later. Keep role-specific HIPAA refresher training for front desk, billing, and associates.

How do you protect the practice's money and contracts?

Separate business and personal accounts, use segregation of duties for cash handling and billing, and reconcile deposits against remittances monthly. Employee dishonesty (fidelity) coverage or a crime policy can cover theft by staff, and cyber liability coverage can respond to ransomware or a breach. Put lease, associate, and vendor agreements in writing, including non-solicitation terms, ownership of patient records, and what happens to records if a provider leaves. Most states require you to retain adult patient records for several years, often 5-10, and to keep minors' records longer, so confirm your state's period before choosing storage.

What should you know about X-ray, supplements, and other services?

If you take X-rays, register the equipment with your state radiation control program, follow inspection and shielding rules, and confirm your malpractice policy covers imaging. Selling supplements, orthotics, or braces adds product-liability exposure, state rules, and, for some payers, billing restrictions. Add services only after checking scope of practice, coverage, and coding, since a service outside your license can create board discipline as well as claim denials.

Take this further

FREQUENTLY ASKED QUESTIONS