Home-health agency coverage guide
Cyber insurance for home-health agencies
Updated 2026-06-11 · by Brokly
If patient records carried into the field are breached — HIPAA's notification duties travel with every visit.
Coverage
What it covers for home-health agencies
Helps the agency absorb the losses that follow a compromise of its systems or patient data — costs like data repair, credit monitoring for affected individuals, business interruption, and litigation. Most commercial property and general liability policies do not cover cyber risk, so it is bought as its own, highly customized policy. For a home-health agency the exposure rides along on every visit: protected health information on the phones and tablets in the field, and the scheduling and visit-verification systems the day runs on — with HIPAA's Breach Notification Rule setting duties to notify affected individuals, the U.S. Department of Health and Human Services, and, in larger breaches, the media. The patient chart leaves the office every morning — a trade run on field devices and scheduling systems carries its records, and its breach duties, wherever care happens.
Sources: HHS — HIPAA Breach Notification Rule (45 CFR §§164.400–414) (retrieved 2026-06-11) · NAIC — Cybersecurity topic (as of last updated 2024-05-09, retrieved 2026-06-11)
By state
Cyber insurance by state
What home-health agencies need varies by state. See the full guide for home-health agencies in your state: Arizona · California · Connecticut · Florida · Georgia · Illinois · Indiana · Kansas · all states →