A Legal Guide To Running A Medical Practice (2026 Updated)

Running a medical practice is deeply rewarding, but it’s also a business with real legal obligations. You’re balancing clinical standards, patient trust, staffing, technology, payments, and privacy - all while trying to keep your day-to-day running smoothly.

This guide is updated to reflect current expectations around privacy, digital systems, and modern practice operations, so you can feel confident you’re meeting your obligations while building a practice that can grow.

Getting your legal foundations right from day one isn’t just about “ticking boxes”. It helps you:

• reduce risk (complaints, disputes, investigations, data issues)
• protect your reputation and patient relationships
• create clear expectations with staff, contractors, and suppliers
• make your practice easier to scale, sell, or bring partners into later

What Legal Structure Should You Run Your Medical Practice Under?

One of the first decisions that affects almost everything else (tax, liability, ownership, expansion) is how your practice is structured.

There isn’t one “best” structure for all healthcare businesses. The right choice depends on your risk profile, whether you’re operating solo or with other practitioners, and whether you’re planning to grow.

Sole Trader

Being a sole trader can be a simple way to start a small practice, especially if you’re the only practitioner and you want minimal admin.

However, the key downside is that you may be personally liable for business debts and some business risks. In healthcare, where patient complaints and operational risks can arise, it’s worth thinking carefully about whether a sole trader structure gives you enough protection.

Company

Many practices operate through a company because it can:

• separate (to an extent) the business from the individual owner
• make it easier to bring in additional owners or investors
• create clearer governance and decision-making processes

It’s still important to understand that certain responsibilities can still attach to directors personally - and professional responsibilities don’t disappear just because you trade through a company. But a company structure is often a strong option for growth and risk management.

If you run a company, it’s also common to adopt a Company Constitution to set rules about decision-making, share transfers, and how your practice is governed.

Partnership (Or Something Close To It)

If you run a practice with one or more other practitioners, you might be operating as a partnership (even unintentionally). This can happen when you:

• share profits
• make joint business decisions
• present yourselves to the public as a joint practice

Partnership-style arrangements can create real legal exposure because partners can be jointly responsible for business debts and obligations.

A tailored Partnership Agreement helps set clear rules on contributions, profit share, decision-making, what happens if someone leaves, and how disputes are managed.

Trusts And Ownership Planning

Some practice owners also consider trusts for asset protection or family planning reasons. This can get complex quickly, so it’s a “get advice early” area. Your structure needs to work in the real world (banking, staffing, leases, billing) - not just look good on paper.

If you’re unsure, it’s usually worth getting tailored advice before you sign a lease, hire staff, or onboard other practitioners. Changing structures later is possible, but it can be time-consuming and expensive.

What Laws Do You Need To Comply With When Running A Medical Practice?

Medical practices sit at the intersection of healthcare obligations and general business compliance. Even if you already understand your clinical and professional duties, it’s easy to underestimate how many “business-side” laws still apply.

Here are the key areas most practices need to get right.

Privacy, Confidentiality, And Health Information

If your practice collects or holds patient information (and it will), you need to comply with the Privacy Act 2020 and the health information rules that sit alongside privacy obligations.

In practical terms, this means you should have systems in place to:

• collect only what you need and explain why you’re collecting it
• store it securely (including digital records, backups, and access control)
• limit access within the practice (not everyone needs access to everything)
• respond to requests from patients who want access to their information
• have a plan for managing privacy incidents and data breaches

If you have a website that collects enquiries, appointment requests, or newsletter sign-ups, you’ll generally want a clear Privacy Policy that matches what your practice actually does with personal information.

Also keep in mind: privacy isn’t just about “not sharing” data. It’s about handling it responsibly across your tools and processes - practice management systems, cloud storage, outsourced billing, IT support providers, telehealth platforms, and more.

Employment Law (If You Have Staff)

If you employ nurses, reception staff, practice managers, or any other team members, you need to comply with key employment obligations under New Zealand employment law, including:

• having written employment agreements
• meeting minimum entitlements (leave, breaks, pay, holidays)
• following a fair process for performance management and termination
• providing a safe workplace

A well-drafted Employment Contract is a practical starting point because it sets expectations around duties, hours, confidentiality, and workplace policies.

It’s also important to manage privacy inside the workplace - for example, limiting staff access to patient records and setting clear rules about using personal devices, messaging apps, and social media.

Health And Safety (Your Clinic Is A Workplace)

Under the Health and Safety at Work Act 2015, you have duties to provide a safe workplace (for workers and others). For a practice, common health and safety focus areas include:

• infection prevention and control procedures
• sharps, clinical waste, and biohazard handling
• worker fatigue and stress (especially in high-demand clinics)
• aggressive or distressed patients and de-escalation procedures
• manual handling risks (for example, in allied health settings)

The “right” approach depends on your practice type - a GP clinic, physiotherapy clinic, dental practice, or specialist rooms will all have different risk profiles.

Consumer And Marketing Laws

Even though you’re delivering healthcare services, you’re also providing services to consumers. Your advertising, pricing statements, and promotional claims need to be accurate.

In New Zealand, the Fair Trading Act 1986 is especially important. It generally means you must not mislead people about:

• what your services include
• results patients can expect
• pricing and fees
• credentials or specialties

This matters for everything from your website and Google ads to social media posts and “before and after” style marketing (where relevant).

How Do You Set Up Strong Patient And Practice Documentation?

In a medical practice, documentation isn’t just an admin task - it’s part of your risk management strategy.

Good documents help you set boundaries, communicate clearly, and reduce misunderstandings (which often sit at the heart of complaints and disputes).

Patient-Facing Documents

Depending on your practice, you may need patient-facing documents such as:

• terms of service (how appointments work, cancellation rules, fees, after-hours expectations)
• informed consent forms (especially for procedures, treatments, or higher-risk services)
• privacy collection notices (what you collect and why)
• complaints process information (how patients can raise concerns)

Clear cancellation and fee policies can be especially important, because frustration about unexpected charges can escalate quickly if patients feel blindsided.

Clinical And Operational Policies

Policies help your team follow consistent processes. Common examples include:

• privacy and confidentiality policy
• records management and retention procedures
• telehealth procedures (identity verification, consent, documentation)
• incident management procedures (clinical incidents and privacy incidents)
• workplace conduct and behaviour standards

Policies should be practical. If they’re too generic, staff won’t use them - and if they don’t reflect reality, they can create risk when something goes wrong.

IT And Vendor Arrangements (Don’t Ignore The Fine Print)

Most modern practices rely on third parties, like:

• practice management software providers
• cloud storage and email providers
• payment processors
• IT support providers
• telehealth and booking platforms

Whenever a vendor handles patient information, you’ll want to understand:

• where data is stored
• who can access it (and how access is controlled)
• what happens if there’s a breach or outage
• how you can retrieve your data if you change providers

This is one of those areas where it’s easy to click “accept” and move on - but it’s much harder to unwind later if the terms don’t protect your practice.

Are Your Doctors And Clinicians Employees Or Contractors (And Does It Matter)?

Many practices engage clinicians as contractors, especially where practitioners want flexibility or operate semi-independently. But in New Zealand, what you call someone isn’t the deciding factor - it’s how the relationship works in practice.

If you get this wrong, it can lead to disputes over:

• holiday pay and other leave entitlements
• tax treatment
• control over rosters, pricing, and clinical processes
• termination rights and notice

Getting this right is especially important when your clinic is growing quickly and you’re onboarding multiple practitioners under different arrangements.

Using Contractor Agreements Properly

If a clinician is genuinely an independent contractor, you’ll usually want a written agreement that covers:

• scope of services and clinical independence
• how fees are charged and how revenue is split
• who supplies equipment, rooms, admin support, and software access
• privacy and confidentiality obligations
• responsibility for professional registrations and insurance
• termination and notice

A tailored Contractor Agreement can help you avoid misunderstandings and reduce the risk of an argument later about what was agreed.

Restraints, Patient Relationships, And Team Stability

Practices often worry about what happens if a clinician leaves and takes patients with them. There’s no one-size-fits-all answer here, because restraints of trade need to be reasonable to be enforceable.

That said, it’s common to address (carefully) issues like:

• non-solicitation (not actively approaching patients or staff to move)
• confidential information protections
• handover processes and continuity of care

This is a good example of where a template can cause more harm than good - a clause that’s too broad may not be enforceable, while a clause that’s too narrow may not help.

How Do You Handle Ownership Changes, New Partners, Or Selling Your Practice?

Even if you’re not planning to sell or expand right now, it’s smart to set up your practice in a way that gives you options later.

Imagine this: your practice is doing really well, and another clinician wants to buy in. Or you want to bring in a practice manager as an equity partner. Or you’re ready to retire and sell the business. These are positive milestones - but they’re much easier when your governance documents are in place.

If You Have Multiple Owners

If your practice has (or will have) multiple shareholders, a Shareholders Agreement can be one of the most important documents you put in place.

It usually deals with things like:

• who owns what (and what happens if someone wants to sell)
• decision-making and voting thresholds
• what happens if an owner stops working in the practice
• how disputes are managed
• how new owners come in (and under what conditions)

This isn’t about expecting the worst - it’s about making sure the business can keep operating smoothly if people’s circumstances change.

Share Transfers And Governance Hygiene

When ownership changes, the paperwork matters. If shares are transferred informally or without clear approvals, it can create uncertainty over who controls the business and who is entitled to profits.

Where you’re transferring shares, a proper process (and clear documents) will usually be needed, and the steps can vary depending on your constitution and existing agreements. For a practical overview, How To Transfer Shares is a helpful reference point when you’re thinking about changing ownership.

Leases, Premises, And Selling The Business

Most practices operate out of leased premises, and that lease can become one of the biggest “make or break” issues when you’re selling, relocating, or restructuring.

If the practice is sold, you may need the landlord’s consent to assign the lease, and the deal timeline can depend heavily on the lease terms. That’s why it’s worth reviewing your lease early and understanding what flexibility you actually have.

When you do decide to sell, you’ll generally want the sale documented properly so that assets, staff arrangements, IP, patient records handling, and restraint clauses are clearly covered. In many cases, that means using a tailored Business Sale Agreement.

Key Takeaways

• Choose a structure that matches your risk profile and growth plans - many practices operate through a company, but partnerships and sole trader structures can still be appropriate depending on your circumstances.
• Medical practices must comply with core business laws, including the Privacy Act 2020, employment law obligations, health and safety duties, and consumer/marketing rules like the Fair Trading Act 1986.
• Strong documentation (patient-facing terms, consent processes, privacy documentation, and internal policies) helps reduce complaints and supports consistent operations.
• Be careful when engaging clinicians as contractors - the legal classification depends on the real working relationship, and written agreements help avoid costly disputes.
• If you’re bringing in partners or planning for growth, documents like a Company Constitution and Shareholders Agreement can make ownership, decision-making, and exits much clearer.
• If you plan to sell your practice later, having your key legal foundations in place early (especially around leases, ownership, and contracts) can make the transaction far smoother.

If you’d like help setting up or reviewing the legal foundations for your medical practice - whether that’s your structure, contracts, privacy compliance, or ownership documents - you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.