Palm trees against a clear sky
Retail · Compounding · Long-Term Care

Pharmacy and drugstore insurance: prescriptions filled, risks covered.

Pharmacist professional liability, products liability, property and inventory, crime and workers' comp for retail, compounding, long-term care and specialty pharmacies.

Quick answer A pharmacy or drugstore needs pharmacist professional liability, products liability, property and inventory coverage, crime coverage and workers' comp, whether it is a retail, compounding, long-term care or specialty pharmacy.

  • Pharmacies face professional claims from dispensing and counseling errors, product claims from compounded medications, and theft risk from high-value and controlled-substance inventory.
  • A pharmacy's policy can cover employed pharmacists, and many pharmacists also carry individual liability coverage.
  • Pharmacy compounding can be covered through markets that write it, and sterile compounding is rated separately.
  • Property and crime coverage can respond to drug theft at a pharmacy, subject to limits for high-value inventory.

By Sam Alishahi · CA Insurance License #4348151 · Reviewed November 2026 · How this page is researched

How it works

Dispensing errors and valuable inventory

Pharmacies face professional claims from dispensing and counseling errors, product claims from compounded medications, and theft risk from high-value and controlled-substance inventory.

I place pharmacies with markets that write the class, combining professional and general liability with property, crime and workers' comp.

  • Professional liabilityDispensing and counseling errors.
  • Products liabilityIncluding compounded medications.
  • PropertyBuilding, fixtures and inventory.
  • CrimeTheft and robbery, including drugs.
Who I help

Pharmacies I insure

Retail pharmacies

Independent community pharmacies.

Compounding pharmacies

Sterile and non-sterile.

Long-term care pharmacies

Serving facilities. See details

Specialty and mail order

High-value medications.

Crime

Employee theft and robbery. See details

Staff

Workers' comp for pharmacy teams. See details

Before you call

What underwriters will ask

Having these ready means I can go to market on the first call. The quote form asks for the same things, and anything you don’t know yet can wait.

Start the Quote Form

  • Pharmacy: type, address and years open.
  • Volume: prescriptions per week.
  • Compounding: sterile, non-sterile or none.
  • Inventory: typical value.
  • Security: alarm, safe and cameras.
  • History: current policies and claims.

California Board of Pharmacy rules underwriters read

In California, these Board of Pharmacy rules shape your application.

  • One license per location (B&P 4110): no one may run a pharmacy without a Board license, renewed every year, and each premises needs its own. A second store is a new location to the Board and on the policy.
  • Pharmacist-in-charge (B&P 4113): the Board must approve a PIC before it issues or renews the license, and the PIC is responsible for the pharmacy's compliance with state and federal pharmacy law. When the PIC leaves, the pharmacy has 30 days to notify the Board and propose a replacement. An interim PIC can serve no more than 120 days.
  • Sterile compounding (B&P 4127.1): sterile compounding needs its own license, renewed yearly, issued only to a licensed pharmacy location and its owner, after a Board inspection and a review of your written procedures, self-assessment and a list of sterile medications compounded since the last renewal. A recall notice for a sterile product you compounded goes to the Board within 12 hours, as does an adverse effect reported or potentially attributable to one, which must also be reported immediately to the FDA's MedWatch program.

Have your latest Board inspection report, PIC name and compounded-product list ready. Outside California, these rules vary by state; send me your state board's latest inspection report.

Medication error rules that shape a claim file

B&P 4125 requires every California pharmacy to run a quality assurance program that, at minimum, documents medication errors caused wholly or partly by the pharmacy or its staff. 16 CCR 1711 sets the steps.

  • What counts: any variation from a prescription or drug order not authorized by the prescriber. A variation corrected before the drug is furnished to the patient or the patient's agent doesn't count.
  • Investigation: it starts as soon as reasonably possible and no later than 2 business days after the error is discovered.
  • Telling people: if the drug was administered to or by the patient, or the error caused a clinically significant delay in therapy, the pharmacist tells the patient (or agent) and the prescriber as soon as possible, unless one of them reported the error.
  • The record: the date, location and participants of the review, the relevant data, documentation of any required patient contact, findings and any recommended changes, kept immediately retrievable in the pharmacy for at least one year.

Under 4125(b), QA program records are peer review documents and generally can't be discovered in a lawsuit or arbitration; records not generated solely for the program can be. Keep the QA file separate, and still report the incident to your professional liability carrier as your policy requires.

DEA and Board rules for missing controlled drugs

Federal and California rules set both the controls and the reporting clocks.

  • DEA registration: 21 CFR 1301.12 requires a separate registration for each principal place of business where controlled substances are dispensed.
  • Storage: under 1301.75(b), Schedule II to V drugs go in a securely locked, substantially constructed cabinet, though pharmacies may instead disperse them through noncontrolled stock in a way that deters theft or diversion.
  • Who gets access: 1301.76(a) bars giving access to an agent or employee with a felony conviction related to controlled substances, or anyone whose DEA registration application was denied, or whose registration was revoked or surrendered for cause.
  • Theft or significant loss: 1301.76(b) requires written notice to the local DEA Field Division Office within one business day of discovery, then a complete DEA Form 106 within 45 days. Filled prescriptions lost in transit are reported on Form 106 by the retail or central fill pharmacy that contracted the carrier (1301.76(d)).
  • Board of Pharmacy: 16 CCR 1715.6 requires a report to the Board within 30 days of discovery once losses reach set thresholds (for oral tablets or capsules, 99 dosage units counted over the prior year). Any loss attributed to employee theft must be reported. Separately, B&P 4104 requires a report within 14 days of receiving an admission, video or documents showing theft, diversion or self-use by a licensed individual, or of a termination for it. The report includes the date of your last controlled-substance inventory.

Keep copies of those reports, inventory counts and any video; a crime underwriter or adjuster will ask for them too.

Patient data breaches: HIPAA and California deadlines

A hacked system or lost laptop at a pharmacy brings two sets of rules. Under HIPAA (45 CFR 164.404 to 164.410):

  • Patients: notified without unreasonable delay and no later than 60 calendar days after discovery.
  • Media: if more than 500 residents of one state are affected, prominent media outlets in that area are also notified.
  • HHS: 500 or more people, at the same time as patient notice. Fewer than 500, logged and reported within 60 days after the end of the calendar year.
  • Vendors: a business associate must tell you without unreasonable delay and no later than 60 calendar days after it discovers the breach.

California Civil Code 1798.82, in its current text, requires notice to affected California residents within 30 calendar days of discovery or notification of the breach, with limited delays for law enforcement or to determine scope. For a breach affecting more than 500 California residents, a sample notice goes to the Attorney General within 15 calendar days of notifying consumers. Medical information and health insurance information both count when paired with a name and unencrypted. Under subdivision (e), full HITECH compliance satisfies only the notice-content rules in subdivision (d), not the rest of the section.

When you compare cyber liability forms, read how each one handles breach response costs such as notice letters and forensics. Know which vendors hold your patient data before you apply; underwriters ask.

Your pharmacist's policy vs. the pharmacy's

IRMI describes druggist liability insurance as a form of professional liability insurance protecting the druggist against suits arising from filling prescriptions, misdelivery of drugs and other operations. The pharmacy's policy and a pharmacist's own policy are separate contracts. I compare:

  • Who is an insured: check whether the entity policy names employed pharmacists, technicians, relief pharmacists and the PIC, and whether it applies to work done for another employer.
  • Trigger: a claims-made policy is triggered by a claim made during the policy period; if it has a retroactive date, the wrongful act must have taken place on or after that date. An extended reporting period is a set time after a claims-made policy expires during which a claim can still be made as if during the policy period. Ask about both before changing carriers or closing a store.
  • Consent and reporting: under B&P 801 (applied to Board of Pharmacy licensees by section 800), an insurer may not settle without the insured's written consent unless both waive it. The professional liability insurer must report a settlement or arbitration award over $3,000 for death or personal injury caused by the licensee's negligence, error or omission to the Board within 30 days after the settlement is signed or the award is served.

If a pharmacist carries their own policy, send me both declarations pages; whether either responds depends on its wording. For other healthcare entities, see medical malpractice insurance.

Questions

Pharmacy insurance, answered

Do pharmacists need their own liability coverage?

The pharmacy's policy can cover employed pharmacists. Many also carry individual coverage.

Is compounding covered?

With markets that write it. Sterile compounding is rated separately.

Is drug theft covered?

Property and crime coverage can respond, subject to limits for high-value inventory.

Can a new pharmacy get coverage?

Yes. Pharmacist experience and controls help.

Do you offer pharmacy insurance outside California?

Yes. Clients across the country send the same quote form. Sam Alishahi is licensed in all 50 states and Washington, DC and places policies there directly. The shopping across carriers works the same way. Rules, minimums and markets differ by state — see insurance requirements by state.

Pharmacy insurance

Send your pharmacy details. I'll shop it.

Type, volume and inventory value are enough to start.

Alishahi Insurance · Saman Alishahi, independent insurance broker, California License #4348151. General information, not a quote or a promise of coverage; coverage depends on underwriting and the terms, conditions and exclusions of the policy actually issued. Some policies may be placed with nonadmitted (surplus lines) insurers, which are not members of the California Insurance Guarantee Association (CIGA).

Get a quote

Tell me how to reach you. I’ll take it from there.

Takes about 30 seconds. Your next step comes by email, and you get an update at every step until your quotes are ready.

(877) 711-4545

Answered 24/7 · CA License #4348151

Only your name, phone and email are required; every question here is optional. This is a request for insurance: Alishahi Insurance (Saman Alishahi, licensed insurance agent) will contact you about it by email, and by text if you check the box. Sending this form doesn’t bind coverage; coverage starts only when it’s confirmed in writing.

Not shopping yet?

Get a reminder before your renewal.

Tell me when your policy renews and I’ll email you about six weeks before, when it’s worth comparing. One email, no calls.