Pharmacy insurance during the installation of a new owner.
Becoming a pharmacy owner doesn't change the core of your profession: dispensing medications, ensuring safe advice, and remaining your patients' trusted local healthcare point of contact. However, setting up practice changes your status. You become a business owner, with a physical location, high-value inventory, expensive equipment, some of the most sensitive health data imaginable, a team, a loan, and personal liability engaged with every dispensation.
This guide breaks down the pharmacy insurance setup checklist into a comprehensive reference framework. For each line of coverage, it specifies the legal framework, expected guarantees, minimum amounts, exclusions to watch out for, and deductibles and sub-limits to check. It is designed as a working resource: to be reviewed before each subscription, each renewal, and each change in your business activity.
1. Professional liability: the legal obligation of pharmacy insurance
What the law says
Professional indemnity insurance is not optional for pharmacists; it is a cornerstone of their pharmacy insurance. Article L.1142-2 of the French Public Health Code, stemming from the law of March 4, 2002, concerning patients' rights, requires any healthcare professional in private practice to take out insurance covering their civil liability for damages suffered by third parties resulting from personal injury, in the context of their entire activity. This insurance also covers the pharmacy's employees acting within the limits of their mission: assistant pharmacists, technicians, and students.
Failure to have pharmacy insurance carries heavy penalties: a criminal fine of 45,000 euros provided for in Article L.1142-25 of the same code, accompanied where applicable by a ban on practicing, and disciplinary sanctions issued by the disciplinary chamber of the Order. Practicing without insurance means practicing outside the legal framework.
The minimum guarantee amounts
The law also regulates the limits. Article R.1142-4 of the Public Health Code, as amended by the Decree No. 2011-2030 of December 29, 20111, fix it regulatory floor the guarantee cannot be less than 8 million euros per claim and 15 million euros per insurance year, for any contract concluded, renewed, or modified since January 1, 2012. Any contract offering less is non-compliant. Severe bodily injury (a dispensing error in a young patient, with permanent disability and loss of income over several decades) can require several million euros in compensation: these amounts are not theoretical.
Understanding the claims basis and the subsequent warranty
Medical professional liability insurance operates on a claims-made basis (Article L.251-2 of the Insurance Code): it is the contract in force at the time the victim makes the claim that applies, and not the one in force at the time the fault was committed. The contract must provide for a subsequent coverage period of at least 5 years after termination, extended to 10 years for the last contract taken out before the cessation of activity or death. This mechanism is crucial at two points in the policyholder's career: upon setting up practice (verifying the coverage of prior unknown acts, i.e., coverage of events prior to subscription of which you were unaware) and upon the sale of the pharmacy.
Declare all actual activity
The contract covers the declared activity, nothing more. However, the pharmacy's scope of practice has expanded considerably: vaccination, rapid diagnostic orientation tests, pharmaceutical consultations, shared medication reviews, home delivery, telecare, compounding and its subcontracting, medical equipment and home care, and orthopedics. Every mission performed must be explicitly stated in the covered activities. An undeclared activity is an uninsured activity, and this is one of the first checks an insurer makes after a claim.
Finally, distinguish professional liability (pharmaceutical acts: dispensing errors, failure to advise, undetected interactions) from public liability (the operation of the premises: a patient falling, injury caused by a display stand, damage caused by an employee). Both components must exist in the contract, with separate limits of coverage
Pre-signature checkpoints
- Amounts: limits of at least 8 million euros per claim and 15 million euros per year, in accordance with Article Article R.1142-4 of the Public Health Code
- Declared activities: comprehensive list of duties performed, including vaccination, TROD (rapid diagnostic orientation tests), consultations, preparations and subcontracting, MAD (medical devices at home) and orthopedics
- Prior and posterior: takeover of unknown past claims at subscription and subsequent guarantee of at least 5 years, 10 years for the last contract before cessation
- Exclusions to read: undeclared activities, non-compliant operations, non-consequential pure financial loss, product recall costs: check what is excluded and what can be bought back
- Franchise: ideally zero or very low on personal injury
2. Commercial multi-risk: protecting the work tool through pharmacy insurance
The pharmacy multi-risk policy (a professional multi-risk policy specifically for pharmacies) combines property damage coverage and business interruption. It is the most technical contract in the pharmacy insurance program, and the one where differences between contracts come down to definitions, sub-limits, and coverage conditions.
Capital: the under-insurance trap
Each item must be rigorously valued: fixtures and fittings (often undervalued after rework), equipment and furniture, inventory, cash. The’Article L.121-5 of the Insurance Code authorizes the insurer to apply the proportional rule of capital: if the property is insured for 60 percent of its actual value, the compensation is reduced in the same proportion, even for a partial loss. Under-reporting does not save on the premium, it creates non-indemnification. Also check the compensation method: replacement value or depreciation deducted, and the cap on the replacement value clause.
The specific guarantees of pharmacy insurance
- Cold chain: Heat-sensitive products (vaccines, insulins, biotherapies) must be stored between 2 and 8 degrees Celsius. The goods loss guarantee for refrigerated storage is almost always subject to a sub-limit, frequently between 5,000 and 15,000 euros. Compare this amount to the actual value of your cold storage stock at the peak of a vaccination campaign, and check the required conditions: temperature data logger, alarm, and cold storage maintenance contract.
- Robots and automatons: A dispensing machine typically represents an investment of 80,000 to 250,000 euros. The machinery breakdown coverage must cover accidental breakage but also internal failure, on a replacement cost basis, with emergency repair costs and, ideally, the rental of replacement equipment. Certain policies make coverage conditional on a valid manufacturer maintenance contract: this is a warranty condition, not a minor detail.
- Theft and vandalism: Contracts require security measures (metal shutters, certified alarm, remote monitoring, safe for narcotics). Their absence or non-activation at the time of the claim allows the insurer to reduce or deny the payout. Also check the sub-limits on cash in the register and in the safe
- Stock Valuate the inventory at its replacement cost and take seasonality into account: the declared capital must cover the peak of the year, not the average
Business interruption: the coverage that saves the company
After a major fire or water damage, it is not the value of the walls that threatens the pharmacy, but the halt of revenue while fixed costs and loan payments continue to run. Business interruption insurance compensates for the lost gross margin and the additional expenses incurred to maintain operations (temporary premises, pharmaceutical container, rental equipment).
Three parameters control everything: the basis (gross margin correctly calculated from the tax return), the indemnification period (12 months are often insufficient when it comes to rebuilding, redesigning, and re-obtaining permits: aim for 18 to 24 months), and the deductible, expressed in days of interruption. Also check useful extensions: inability to access, supplier default, loss of business value in the event of prolonged closure.
Pharmacy insurance control points before signing
- Capitals: up-to-date capital per item, new-for-old replacement value basis, no risk of average clause
- Cold chain: refrigeration warranty amount relative to actual cold stock, technical conditions met
- Machine breakdown: internal breakdown included, replacement value as new, maintenance requirement identified and respected
- Business interruption: indemnity period of 18 to 24 months, gross margin basis validated with the accountant, shortest possible time deductible
- Sub-limits and exclusions: review the sub-limits (refrigerator, cash, windows, goods in transit) and the list of exclusions (lack of maintenance, undeclared work, prolonged vacancy)
3. Pharmacy cyber assurance: the risk has become structural
A documented threat, not a sales pitch
The healthcare sector is one of the most targeted by cybercrime in France. CERT Santé recorded approximately 770 incident reports in 2025; while ransomware attacks declined by about 30 percent year-on-year, account compromise and credential theft have become the primary threat, and nearly 38 percent of the reports forced the affected facilities to operate in a degraded mode or interrupt patient care. In late 2025, the compromise of a medical software vendor exposed the data of more than 11 million patients. The pharmacy, which centralizes health data, electronic transmission, and total dependence on pharmacy management software (LGO), checks all the boxes for the ideal target.
Your specific obligations in the event of an incident
The owner is the data controller within the meaning of the GDPR. In the event of a data breach likely to result in a risk to individuals, notification to the CNIL must be made within 72 hours of becoming aware of it (Article 33 of the GDPR), with direct information to patients in the event of a high risk (Article 34) and systematic recording in the register of breaches. The CNIL reference framework for pharmacies and the guide published with the National Order of Pharmacists specify the framework; the CNIL also considers that a data protection impact assessment and the appointment of a data protection officer are generally required beyond 2.6 million euros excluding tax in annual turnover. Finally, any outsourced hosting of health data (hosted LGO, remote backup) must be entrusted to an HDS-certified host in accordance with Article L.1111-8 of the Public Health Code.
What a good cyber contract must contain
- Crisis management: 24/7 contractual hotline, mobilization of investigation experts, legal assistance and crisis communication. In practice, this is the most valuable guarantee: the first 48 hours determine the scale of the incident.
- Data reconstruction: system decontamination costs, backup restoration costs, and file reconstruction costs, including the patient history of the LGO
- Cyber business interruption: compensation for lost margin during system downtime, with a particular focus on the deductible, often expressed in hours of interruption
- Notification and AR: notification fees to the CNIL and to patients, scaled to the actual size of your patient base, and civil liability for damages caused to third parties by the data leak
- Extortion and fraud: cyber extortion and wire transfer fraud coverages (false supplier, fraudulent transfer order), often optional and sub-limited: to be explicitly requested
Pre-signature checkpoints
- Safety conditions: Contracts are increasingly conditioning coverage on prerequisites: multi-factor authentication, disconnected and tested backups, and system updates. A prerequisite that is not met on the day of the claim is equivalent to a lack of coverage.
- Exclusions to read: obsolete operating systems, known previous incidents, provider or cloud outages (to be bought back if possible), exclusion clauses for acts of war and state-sponsored attacks whose wording has become stricter
- Sub-limits: check internal sub-limits (ransomware, fraud, data) that can reduce an attractive displayed cap to modest actual coverage
4. Employee health and welfare: employer obligations
From the very first employee, the holder becomes the employer in a heavily regulated sector. The national collective bargaining agreement for retail pharmacies (IDCC 1996, brochure 3052) establishes mandatory health and contingency expense schemes (death, work incapacity, disability, maternity) for all personnel, executives and non-executives, with minimum guarantees defined by the branch and regularly revised by amendment.
The industry branch recommends an insurance organization (APGIS) without making membership mandatory: the pharmacy that chooses another insurer remains required to comply, guarantee by guarantee, with the minimum agreement standards, including the high-level solidarity mechanism. Regarding financing, the employer's contribution to the health care scheme is at least 50 percent of the premium, and the contract must comply with the specifications of the responsible contract and the minimum care basket, including 100 percent Health.
Formalities matter as much as the contract: implementation act (unilateral decision, agreement, or referendum), delivery of the information notice to each employee, management of exemption requests from affiliation, and the portability of rights after departure. A poorly formalized plan exposes the employer to an URSSAF audit regarding social security exemptions.
Pre-signature checkpoints
- Conventional minimums: line-by-line compliance verified against the latest industry amendment, rather than by an approximate overall equivalence
- Funding: employer health insurance contribution of at least 50 percent, with a contribution structure that distinguishes between executives and non-executives
- Alsace-Moselle local health insurance scheme: for an Alsatian or Mosellan pharmacy, correct coordination of benefits with the local health insurance scheme
- Carrying over liabilities: in the event of a change of insurer, takeover of ongoing claims (sick leave, disability) and maintenance of coverage in the event of suspension of the employment contract giving rise to compensation
- Formalism: DUE or up-to-date agreement, notices handed over, documented exemptions, organized portability
5. The protection of the business leader: the great forgotten one
This is the classic paradox of setting up a practice: the pharmacy owner insures the premises, the stock, the robot, the team, and forgets about themselves. Yet it is the owner who carries the loan, the personal guarantee, and the pharmacy's ability to generate its margin. The mandatory insurance schemes for self-employed pharmacists offer limited benefits in terms of sick leave and disability relative to an owner's income: without supplementary coverage, a long-term leave results in an immediate scissors effect between plummeting income and unchanged financial obligations.
The policyholder's individual provident insurance
The contract must be structured on three levels: daily allowances in the event of work stoppage, an annuity in the event of disability, and a lump sum and annuities in the event of death (spouse, children's education). The tax and social status of the policyholder (self-employed worker or treated as an employee depending on the operating structure) determines the underwriting framework, in particular eligibility for the Madelin scheme for the self-employed.
The technical details make all the difference between two contracts with comparable premiums. First, the definition of disability: disability assessed in relation to your profession as a pharmacist offers real protection; disability assessed in relation to any profession can leave you without an annuity even though you can no longer practice. Second, the method of compensation: flat-rate daily allowances, paid without proof of loss of income, are preferable to indemnity-based allowances recalculated after the fact. Finally, the waiting period (15, 30, 60, or 90 days), to be coordinated with the pharmacy's cash flow, opting if possible for a reduced waiting period in the event of hospitalization or accident.
Borrower insurance and key person insurance
Acquisition loan insurance deserves the same scrutiny: insured percentages consistent with the loan structure, effective work incapacity coverage (and not just death and total and irreversible loss of autonomy), definition of disability, exclusions relating to back and psychological conditions (which can be bought back in good contracts). Since the Lemoine law, borrower insurance can be canceled and replaced at any time: a renegotiation lever not to be overlooked, both in terms of pricing and the quality of definitions.
The key person insurance policy completes the mechanism: taken out and funded by the company, it compensates the business itself (loss of gross margin, replacement costs) in the event of the unavailability of the key person or a strategic deputy. It protects the value of the business assets, whereas individual provident insurance protects the family's income.
Pre-signature checkpoints
- Definition of disability: evaluated in relation to the pharmacy profession, known contractual scale, identified annuity trigger threshold
- Daily allowances: flat-rate, in an amount consistent with actual income and personal and professional fixed expenses
- Exclusions: back and psychological exclusions identified and bought back if necessary, declared sports and risky activities
- Capitals: death benefits and annuities consistent with the loan, the guarantee, and the family situation; revaluation of benefits in payment
- Borrower: quotas, effective incapacity and disability guarantees, substitution option used to improve the contract
6. Legal protection: anticipating disputes
Pharmacy operations generate disputes of all kinds: disagreements with a supplier or IT service provider, employment tribunal litigation, conflicts with the landlord, criminal defense following a complaint, and above all, disciplinary defense before the disciplinary chamber. Legal protection is governed by Articles L.127-1 and following of the Insurance Code, which notably guarantee the insured's free choice of lawyer.
The essential distinction: a defense-and-recourse guarantee included in a multi-risk policy only applies in connection with a claim covered by that contract. It covers neither commercial disputes, nor employment tribunal litigation, nor disciplinary proceedings. Only a dedicated legal protection contract, with explicit areas of intervention, offers real coverage. Disciplinary defense, which is specific to regulated professions, must be expressly mentioned: this is a simple indicator of the quality of a contract intended for pharmacists.
Pre-signature checkpoints
- Type of contract: standalone legal protection insurance contract, and not a simple accessory defense-and-recourse guarantee of the multi-risk policy
- Areas of intervention: list expressly covering professional disciplinary defense, labor tribunal disputes, supplier disputes, commercial leases, and where applicable, tax and URSSAF disputes, which are often optional
- Ceilings and scale: cap per dispute and per year, contractual fee scale by type of procedure: this is what determines your actual out-of-pocket expense if you choose your own lawyer
- Intervention threshold and deficiencies: amount below which the insurer does not intervene, waiting periods (particularly in employment tribunal and tax matters), exclusion of disputes whose triggering event occurred prior to the subscription
7. The cross-functional method: six reflexes before any signature
Beyond each contract, a reading discipline applies to the entire pharmacy insurance program. Six reflexes structure the analysis.
- Read the exclusions before the guarantees : A contract is judged first by what it takes away. The list of exclusions, both general and by guarantee, is read first.
- Compare each ceiling to a quantified scenario: A cap is not judged in the absolute, but against a realistic loss: what 15 days of closure cost, the loss of cold storage stock in November, the reconstitution of the LGO
- Track sub-limits: The ceiling shown on the front page is often reduced by internal limits per guarantee. The table of guarantee amounts is authentic, not the brochure.
- Check each franchise: amount, nature (fixed, proportional, in days or hours for business interruption losses) and potential accumulation between guarantees
- Check the warranty conditions: means of protection against theft, robot and cold room maintenance, and cybersecurity prerequisites: these are conditions whose non-compliance results in a denial of coverage, regardless of the cause of the loss
- Update the program every year: new missions, construction work, acquisition of an automated dispensing system, hiring, revenue growth: every change in the pharmacy must be declared to the insurer to maintain adequate coverage
8. Summary table
| Cover | Status | Priority control |
| Professional liability insurance | Mandatory (L.1142-2 CSP) | €8 million per claim and €15 million per year minimum; all declared assignments; run-off cover |
| Comprehensive and business interruption insurance | Essential, often required by the lease and the bank | Updated capitals, fridge and appliance properly under-insured, compensation period from 18 to 24 months |
| Cyber | Highly recommended | 24/7 hotline, patient-scaled notification fees, achievable security prerequisites |
| Employee health and welfare insurance | Mandatory from the first employee (IDCC 1996) | Strict compliance with industry minimums, employer contribution of at least 50 percent, formalism |
| Executive insurance, borrower, key person | The great forgotten one | Disablement defined in relation to profession, flat-rate daily allowances, capital sums consistent with the loan |
| Legal protection | Recommended | Dedicated contract, express ordinal defense, fee schedule and actual caps |
In conclusion
The pharmacy insurance program is not just a pile of contracts: it is an architecture, every piece of which must be sized to fit your actual situation and reviewed with every change in your business. The differences between two contracts with equivalent premiums lie in the definitions, sub-limits, coverage conditions, and exclusions. This is precisely where the work of the specialized broker comes into play: comparing each clause against the reality of a pharmacy, yours.
Uncertain about your current coverage or an installation project? KRAFT Assurances supports community pharmacists in auditing, structuring, and placing their pharmacy insurance program. Contact us to make the right choices.
This article is intended for general information purposes only and does not constitute personalized advice. The cited texts are those in force on the date of publication; the applicable guarantees are those set out in the subscribed contractual terms.
Sources and references
Public Health Code, articles L.1142-2, L.1142-25 and R.1142-4 (Decree No. 2011-2030 of December 29, 2011), Légifrance
Insurance Code, Articles L.251-2 (claims-made basis and subsequent coverage), L.121-5 (proportionality rule) and L.127-1 et seq. (legal protection)
National collective bargaining agreement for community pharmacies of December 3, 1997 (IDCC 1996, brochure 3052) and amendments relating to contingency and healthcare expense schemes
CNIL and National Order of Pharmacists, guide The Community Pharmacist and Personal Data Protection; CNIL reference framework on processing intended for pharmacy management (deliberation no. 2022-067 of June 2, 2022); GDPR, Articles 33 and 34
CERT Santé (Agence du Numérique en Santé), Observatory of Information Systems Security Incident Reports for the Health and Social Care Sectors, 2025 Report; ANSSI, Health Sector, State of the Computer Threat (CERTFR-2024-CTI-010)
Public Health Code, article L.1111-8 (HDS-certified health data hosting)
